INF_OTORUN.VBFS

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It automatically executes files when a user opens a drive.

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Propagation

The said .INF file contains the following strings:

{garbage characters}
[autorun]
{garbage characters}
open={random}.EXE
{garbage characters}
ActIoN={random number}
{garbage characters}
uSeautoplay=1
{garbage characters}

Other Details

This Trojan automatically executes the following files when a user opens a drive:

• {drive letter}:\{random file name}.exe