win32/autorun.agent.OZ worm - What is it and What does it Do

[techguru007]

Hi All,

win32/autorun.agent.OZ worm

My computer has an indepth scan regularly and this was found today.
A file was infected with this worm.

I cannot locate anywhere any information on what this worm does, how to make sure that it has been cleanly removed and what is its delivery mechanism.

Does anybody know anything that can be of help.

From a concerned techie who has gone to length to keep environment secure.

Kind Regards,
Tech Guru

[BrendanK.]

Originally Posted by techguru007

Hi All,

win32/autorun.agent.OZ worm

My computer has an indepth scan regularly and this was found today.
A file was infected with this worm.

I cannot locate anywhere any information on what this worm does, how to make sure that it has been cleanly removed and what is its delivery mechanism.

Does anybody know anything that can be of help.

From a concerned techie who has gone to length to keep environment secure.

Kind Regards,
Tech Guru

Viruses are self-replicating. They are often spread by a network or by transmission to a removable medium such as a removable disk, writable CD, or USB drive. Viruses may also spread by infecting files on a network file system or a file system that is shared by another computer.

This symptoms of this detection are the files, registry, and network communication referenced in the characteristics section.

[bogdan]

Different AV companies use different names for the threats. If your AV (probably NOD32) doesn't offer any information on that virus, try uploading the file to VirusTotal and see how other products name it, then search their online threats database.

ESET Threat Encyclopedia
Symantec Threat Explorer
Avira Virus Info
PCTools Threat Expert

If that file is an executable (and you still have it quarantined) you might upload it to some analysis center like:
COMODO Instant Malware Analysis
Anubis.
Make sure you don't execute the file.