Summary

Summary
Action
More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Included in our products from | April 2008 (4.28) |
| Protection available since | 15 February 2008 20:13:25 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing worms.
More Information
Bat/Autorun-BJ is a worm for the Windows platform.
Bat/Autorun-BJ attempts to copy itself to removable drives and creates an autorun.inf file in those drives in order to execute when they are inserted into a computer running the Windows operating system.
Running Bat/Autorun-BJ will cause Windows to shutdown after 30 seconds.
Bat/Autorun-BJ will set Internet Explorer's start page to http://bbs.kafan.cn by modifying the following registry entries:
HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
