TrojanDropper:Win32/Vtimrun.A

TrojanDropper:Win32/Vtimrun.A is a trojan that drops and installs a trojan downloader onto the local computer. The dropped trojan is identified as TrojanDownloader:Win32/Vtimrun.A.

TrojanDropper:Win32/Vtimrun.A may be downloaded manually by a user from a site hosting the trojan. When run, it executes its trojan dropper payload.

When run, this trojan drops a hidden file as the following:

 

%temp%\vbruntime.tmp - TrojanDownloader:Win32/Vtimrun.A

 

TrojanDropper:Win32/Vtimrun.A loads the dropped file and calls the function provided by the dropped file to load it into already running user processes. This dropped file is deleted when the computer is restarted.

The trojan may be have a popular filename that could entice a user to download and execute the trojan. In the wild, this trojan has been observed to be distributed within a malicious trojan masquerading as "Windows 7 RC". For additional information about TrojanDownloader:Win32/Vtimrun.A, see our description elsewhere in the encyclopedia.