Definition
Autorun worm is a malware type that spreads via hardware or other removable media such as USB flash drives and CDs.
Once the malicious removable media connects to the device, the autorun virus infiltrates the system, automatically executes malicious codes and infects the device.
This virus can do various malicious activities like compromising the system, stealing personal data or launching attacks.
How Autorun Worms Work
- Infection stage: Autorun infects your device through removable storage devices and automatically executes a code by exploiting the autorun.inf file.
- Replication and spread: Once installed in your device, it replicates itself and extends further to connected devices and network drives, creating multiple copies.
- System compromise: After creating multiple copies and spreading to other devices, the autorun worm executes malicious activities like stealing sensitive information, installing spyware or creating backdoors for unauthorized access.
Types of Autorun Worms
Autorun worms have different characteristics. Here are the common types:
- Ramnit: It infects and spreads on your Windows system via removable media and network shares. It aims to steal sensitive information, such as login credentials and banking information.
- Conficker: Like Ramnit, it targets Windows systems and spreads through removable media, network vulnerabilities, and network shares. It is known for avoiding detection and updating itself.
- Sality: This autorun worm infects executable files on a Windows system. It can also download additional malware and spread it throughout your system.
Autorun Worm Prevention Tips
- Be wary of removable media: Be careful when using external and removable disks as they may contain malicious files. So, always scab external media drives before accessing files or information on your computer and avoid media from untrustworthy sources.
- Disable autorun: Deactivate the autorun feature to avoid automatic installation of programs stored in external media.
- Keep your system updated: Regularly update your operating system to ensure you run the latest security patches.
- Use antivirus software: Install a reliable antivirus to detect and remove malicious files and programs from your computer.