This is a fairly low risk worm threatening all versions of Windows operating systems. The worm spreads via removable drives and also via network shares.

While the worm itself is fairly low risk, if installed it can download further malware that could be very harmful to your system.

Files Affected:

  • %Windir%\Temp\rld[SINGLE NUMBER].tmp
  • %System%\config\systemprofile\Local Settings\History\desktop.ini
  • %System%\config\systemprofile\Cookies\index.dat
  • %System%config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini
  • The worm will also run itself as the explorer.exe or svchost.exe process. It will also create registry entries so that it is executed on bootup. The worm will copy itself to all other drives and will then attempt to download further malware.

    Scan and Remove W32.Aurax Now