An infected CD-ROM unleashes a worm on your Windows network.
In this scenario, the system “inserts” a worm-infected CD-ROM to a Windows machine. When inserted, the auto-run executes and loads the worm, which copies and runs itself, together with a packed watchdog executable, to the Windows directory. The worm scans the network, spreads via Windows Management Instrumentation (WMI) commands, and blocks every execution of threatening applications (such as TaskMgr, ProcMon, Regedit, etc.) by freezing the application threads.