Sophos

Bat/Autorun-BJ

Aliases
  • Virus.BAT.Autorun.t
  • Bat/sdel
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Removable storage devices
Affected operating systems Windows
Included in our products from April 2008 (4.28)
Protection available since 15 February 2008 20:13:25 (GMT)
Detected by All Sophos products

Action

More Information

Bat/Autorun-BJ is a worm for the Windows platform.

Bat/Autorun-BJ attempts to copy itself to removable drives and creates an autorun.inf file in those drives in order to execute when they are inserted into a computer running the Windows operating system.

Running Bat/Autorun-BJ will cause Windows to shutdown after 30 seconds.

Bat/Autorun-BJ will set Internet Explorer's start page to http://bbs.kafan.cn by modifying the following registry entries:
HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer