Sophos

W32/Autorun-DP

Aliases
  • Worm/VB.JX
  • W32.SillyFDC
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Removable storage devices
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 24 April 2008 01:55:53 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

When first run W32/Autorun-DP copies itself to:

- <Windows>\windowsmp.exe
- <System>\init.exe
- <Windows>\yoos.b
- <Root>\explorer.exe

The following registry entry is created to run windowsmp.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
windowsmp
<Windows>\windowsmp.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer