 |
|
 |
|
DizzyX
Administrator
Data inscrierii: 16/Iul/2008
Mesaje: 48
|
|
 |
|
 |
|
 Trimis: 16/07/2008 02:07 Titlul subiectului: Trojan.Autorun.US |
 |
|
Trojan.Autorun.US
( Worm.Win32.VB.fi, Win32.HLLW.Unjap, Worm/VB.FI.5, W32.SillyDC )
Raspandire : mediu
Dauna : extrem de scazut
Size: 100 - 150 bytes
Descoperit : 2008 Jun 06
SYMPTOMS:
A file named autorun.inf in the root of fixed/mobile drives (hard disks partitions, USB pen drives etc.)
TECHNICAL DESCRIPTION:
This is an autorun.inf file created by different trojans and it is used as an alternative/complementary solution to autorun keys for the malware to ensure it's execution.
They are placed in the root directory of fixed and removable drives and contain the information needed to execute the worm upon access of those drives on systems that have autorun enabled. These kind of files are also used in the spreading process of some worms that copy themselves and create a corresponding autorun.inf file on removable drives like pen drives thus getting executed on other systems on which the infected removable drive will be used.
The file is just a starting point for malware, it does not contain other malicious code. |
|
FAQ 
Mesaje private 
