My Bitdefender
  • 0 Shopping Cart


Facebook Twitter Google Plus


50 - 300 bytes
(Worm.Win32.AutoRun.dmh, Worm:Win32/Hamweq!inf, Win32/AutoRun.LZ)


A file named autorun.inf in the root of fixed/mobile drives (hard disks partitions, USB pen drives etc.)

Removal instructions:

Please let BitDefender delete the file.

Analyzed By

Andrei DAMIAN-FEKETE, virus researcher

Technical Description:

This is an autorun.inf file created by different worms and it is used as an alternative/complementary solution to autorun keys for the malware to ensure it's execution.

They are placed in the root directory of fixed and removable drives and contain the information needed to execute the worm upon access of those drives on systems that have autorun enabled. These kind of files are also used in the spreading process of some worms that copy themselves and create a corresponding autorun.inf file on removable drives like pen drives thus getting executed on other systems on which the infected removable drive will be used.

The file is just a starting point for malware, it does not contain other code.