Name :	Worm:W32/AutoIt.Q
Size:	485692
Category:	Malware
Type:	Worm
Platform:	W32
Date of Discovery:	November 24, 2008

This malware spreads by copying itself to removable devices and replacing the autorun.inf of the device with its own copy to ensure automatic execution.

File System Changes
Creates these files:



Modified these files:




Process Changes
Creates these processes:



Creates these mutexes:




Registry Modifications
Sets these values:



Creates these keys:

The file called suicide.bat is an installation helper file that deletes the original malware file. It performs a ping loopback on the system to check for the presence of a functioning network card.

After completing its routine, the batch file deletes itself.