Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | November 2007 (4.23) |
| Protection available since | 13 September 2007 23:35:43 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Nobond-B is a downloader Trojan for the Windows platform.
Troj/Nobond-B attempts to drop the file <Temp>\msie.dat, also detected as Troj/Nobond-B, and inject it into an instance of Microsoft Internet Explorer, in order to download a remote file to <Temp>\msie.exe and execute it.
Troj/Nobond-B displays a fake error message box with the title "Adobe Reader" and the following text :
Adobe Reader could not open the document because it is either not a suported
file type or because the file has been corrupted (for example, it was sent as an
email attachment and wasn't correctly decoded).
