TROJ_OTORUN.AB
PLATFORM:
Windows 2000, Windows XP, Windows Server 2003
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan may be dropped by other malware.
TECHNICAL DETAILS
File Size:
215 bytes
File Type:
INF
Memory Resident:
No
Initial Samples Received Date:
31 Jan 2011
Arrival Details
This Trojan may be dropped by other malware.
Other Details
This Trojan contains the following strings in its code:
- [AutoRun]
open=BACKUP\RESTORE\driver.exe
icon=%System Root%\system32\SHELL32.dll,4
action=Abrir carpeta para ver archivos
shell\open=Open
shell\open\command=BACKUP\RESTORE\driver.exe
shell\open\default=1
(Note: %System Root% is the root folder, which is usually C:\. It is also where the operating system is located.)
NOTES:
This Trojan enables automatic execution of its component malware every time the physical and removable drives where it is dropped are accessed.