Home / malware

PDF

Worm:JS/Proslikefan.gen!inf

First posted on 21 June 2013.
Source: Microsoft

Aliases :

Worm:JS/Proslikefan.gen!inf is also known as Trojan.Win32.Buzus.dzwk (Kaspersky), doslegacy/Suspicious_Gen2.RIILM (Norman), INF/AutoRun!tr (other), TROJ_OTORUN.ITW (Trend Micro), HTML/ExpKit.Gen3 (Avira), Worm.JS.Proslikefan (Ikarus), W32/AutoInf-DQ (Sophos).

Explanation :

Wor m:JS/Proslikefan.gen!inf is an autorun.inf file created by worms such as Worm:JS/Proslikefan.K, Worm:JS/Proslikefan.C, and Worm:JS/Proslikefan.gen!D.

These worms create the autorun.inf file to help them spread and infect other computers. The worm checks your computer for network and local drives, and removable devices, such as a USB flash drive. When it finds a drive it copies the worm in a randomly named folder with a randomly named file name. It also creates an autorun.inf file in the root folder that points to the worm..

When the drive is accessed from a computer supporting the Autorun feature, the worm is launched automatically.



Analysis by Chris Stubbs

Last update 21 June 2013

 

TOP