Troj/CHMDrop-B is a Trojan for the Windows platform.
Top-level component of Troj/CHMDrop-B is a compiled HTML help file containing an article called "Photos of Tibet in the early 1940's".
When Troj/CHMDrop-B is run, it drops a file called music.exe - also detected as Troj/CHMDrop-B.
The file music.exe drops two further files and deletes itself:
- <WINDOWS>\system\conime.exe -detected as Troj/CHMDrop-B
- <WINDOWS>\system\zipfldr.dll - proactively detected as Mal/Emogen-AA
Troj/CHMDrop-B will attempt to download two files:
- photos-downloaded1.exe - detected as Troj/CHMDrop-B
- photos-downloaded2.exe - detected as Mal/Emogen-Y