Home / malwarePDF  

VirTool:INF/Autorun


First posted on 20 February 2020.
Source: Microsoft

Aliases :

VirTool:INF/Autorun is also known as BAT.AutorunT.vs, W32/Autorun.JQW.worm, Mal_Otorun2.

Explanation :

This is a detection for a file, called autorun.inf, that can be used by worms when they spread to local, network, or removable drives.

The file has instructions to launch the malware automatically when the removable drive is connected to a PC with the Autorun feature turned on.

This is a common way for malware to spread. However, autorun.inf files on their own are not necessarily a sign of infection; they are also used by legitimate programs. 

Analysis by Tim Liu

Last update 20 February 2020

 

TOP