Home Malware Programs Worms Worm.Win32.AutoRun.bhqp

Worm.Win32.AutoRun.bhqp

Posted: April 18, 2011

Worm.Win32.AutoRun.bhqp is a malicious computer worm that can deliver itself primarily through email, Internet chats and network sharing files and it can propagate on its own. Worm.Win32.AutoRun.bhqp is able to disable the firewall downloading unwanted files and applications that involves various malware. Worm.Win32.AutoRun.bhqp will launch automatically when computer system is booted up until the start-up item is deleted. Worm.Win32.AutoRun.bhqp should be eliminated from a computer once it's detected.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\%UserName%1\winlogon.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]NVIDIA Media Center Library = "%UserProfile%\%UserName%1\winlogon.exe"
Loading...