W32/Autorun-BGA

Category: Viruses and Spyware Protection available since:08 Aug 2010 11:50:48 (GMT)
Type: Win32 worm Last Updated:08 Aug 2010 11:50:48 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Autorun-BGA is a worm for the Windows plaform.

When the W32/Autorun-BGA is installed the following files are created:

<Startup>\winup.exe
<System>\winup.exe

The following registry entry is created to run winup.exe on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Windows Update
<System>\winup.exe

The following registry entries are set, disabling system software:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
DisableTaskMgr
0x00000001

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
DisableRegistryTools
0x00000001

download Try Sophos products for free
Download now