Code: Select all
[autorun]
open=RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe
icon=%SystemRoot%\system32\SHELL32.dll,4
action=Open folder to view files
shell\open=Open
shell\open\command=RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe
shell\open\default=1
My anti-virus defined it as a trojan ("Trj/Autorun.YE"), and it recreate itself if I delete it.
In addition i found AUTORUNME.EXE-271E2F53.pf in C:\WINDOWS\prefetch
Anyone who knows how this trojan works or how I can delete it? I must admit that I don't really understand what's written in the .inf-file.