3/11: Buzus.AMRB Trojan Drops Files, Modifies Registry

W32/Buzus.AMRB is a Trojan that will infect Windows systems.

Upon execution, this Trojan drops the following files in Windows folder.

autorun.inf
vshost.exe

The Trojan modifies registry at the following locations:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

More information can be found at this Proland Software page.