This application requires Javascript for optimal performance.

W32/Autorun.MUU!worm - Released Sep 09, 2008 - Last Updated Sep 10, 2008

Visible Symptoms

  • Deletes itself from the current directory.

  • The following files exist under the %ProgramFiles%\Microsoft Common\ folder.
    • wuauclt.exe

    Detailed Analysis


    The behavior of this worm is very similar to W32/Agent.5190!tr.dldr. For a more detailed description, please proceed to W32/Agent.5190!tr.dldr.

    Recommended Action

      FortiGate Systems

    • Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option.

      FortiClient Systems

    • Quarantine/delete files that are detected and replace infected files with clean backup copies.

    Reference: ID - 556534