Registrycleanerz

Is your computer behaving odd? Are you unsure of what this might mean? The latest threat I’ve come to know of is identified as Win32/AutoRun.PD. Maybe this is the answer you are looking for. This worm affects Windows95, Windows 98 and others. Read some of my articles related to this topic here.

You should keep in mind that this worm multiplies through mapped network drives. Win32/AutoRun.PD also attempts to copy itself to the following locations:

• %WINDIR%\userinit.exe
• %SYSDIR%\system.exe
• %drive%\Secret.exe

Then the following files are created:

• - Non malicious file: %SYSDIR%\MSWINSCK.OCX

- %drive%\autorun.inf This is a non malicious text file with the following content:

• %code that runs malware%

- %WINDIR%\kdcoms.dll This file contains collected keystrokes.

Win32/AutoRun.PD. affects OS systems like: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003.

Once the worm has gained access to your system it does the following:

• it downloads a file;
• also drops files;
• records keystrokes;
• makes registry modification;
• steals information;
• offers third party control.

Resources:
The variants of Win32/AutoRun.PD
Review on the worm