USB autorun - Could it be trojan?

Hello. I only wanted to hear your opinion on whether you think it's possible that a person X is trying to stalk or use a trojan on my friend, so I have no technical data at hand.

My friend asked me to check his USB drive which didn't work properly.

I opened the autorun.inf with TextPad and the text was written in a strange way:

[aUTOrun]
etc.
sHELLexeCuTE=PeRsOnXsNamE.exE
IcON=...
etc.

Later I also learned that this person X asked my friend's IP address.

I'm not sure how trojans work but the fact that person X's name was in the autorun.inf file made me suspicious.

Thank you

 

It certainly sounds suspicious and I would be reformatting the device. Tell your friend to distance himself from Mr.X.

 

Yep, there's something fishy going on here!

 

Ask your friend if there is any data on the drive he wants to keep, if so run a full virus and anti-malware scan on it with whatever antivirus you have installed and malwarebyte's anti-malware. If there are no files your friend wants saved, then use windows to format the device.

Then run a full virus and malware scan on ALL computers you have access to that the device has been plugged into.

Also, do tell your friend to distance himself from MR. X as Bold Eagle has said.

Also try a windows search for PeRsOnXsNamE.exE, after the scans, and if you find it, delete it immediately.