McAfee > Theat Center > Virus Detail Page

Overview

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Characteristics

There are 3 known versions of this trojan. Each requires the BRUN45.EXE file (Microsoft QBasic run-time file) in order to perform its designated task. This file is typically absent from Win9x and greater systems.

- Version 1 attempts to reformat the C: drive
- Version 2 attempts to delete all files on the root level of C:
- Version 3 attempts to delete the file C:\WIN.INI

Symptoms

Deleted files on the root level of the C: drive. Without the BRUN45.EXE QBasic run-time file, the user will be prompted as follows:

Input run-time module path:

Unless a valid path is specified to the BRUN45.EXE file, the trojan will not carryout its destructive payload.

Method of Infection

Accidentally or intentionally running this program, in conjunction with having the BRUN45.EXE file installed properly, causes a loss of data on your system.

Removal

All Users:
Use current engine and DAT files for detection. Delete any file which contains this detection.

Variants

Variants

N/A

All Information

Overview -

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Characteristics

Characteristics -

There are 3 known versions of this trojan. Each requires the BRUN45.EXE file (Microsoft QBasic run-time file) in order to perform its designated task. This file is typically absent from Win9x and greater systems.

- Version 1 attempts to reformat the C: drive
- Version 2 attempts to delete all files on the root level of C:
- Version 3 attempts to delete the file C:\WIN.INI

Symptoms

Symptoms -

Deleted files on the root level of the C: drive. Without the BRUN45.EXE QBasic run-time file, the user will be prompted as follows:

Input run-time module path:

Unless a valid path is specified to the BRUN45.EXE file, the trojan will not carryout its destructive payload.

Method of Infection

Method of Infection -

Accidentally or intentionally running this program, in conjunction with having the BRUN45.EXE file installed properly, causes a loss of data on your system.

Removal -

Removal -

All Users:
Use current engine and DAT files for detection. Delete any file which contains this detection.

Variants

Variants -

N/A