BAT_VOBFUS.SM

This Trojan may be dropped by other malware.

Arrival Details

This Trojan may be dropped by the following malware:

• WORM_VOBFUS

NOTES:

This is the Trend Micro detection for the batch file component of WORM_VOBFUS malware which is used to delete the initially executed copy of a WORM_VOBFUS variant.

This malicious batch file continuously checks for the presence of the WORM_VOBFUS variant. It deletes the said file when found. However, if the WORM_VOBFUS variant does not exist, this batch file deletes itself after execution.

This batch file contains the following format:

:{letter}
del {WORM_VOBFUS path and file name}
if exist { WORM_VOBFUS path and file name} goto {letter}
del /F {malware path and file name}