Sophos

Troj/Mdrop-BRT

Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Email attachments
Affected operating systems Windows
Characteristics
  • Drops more malware
Included in our products from June 2008 (4.30)
Protection available since 21 April 2008 18:20:49 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Mdrop-BRT is a dropper Trojan for the Windows platform.

Troj/Mdrop-BRT is a Microsoft PowerPoint file which typically arrives as an email attachment.
            
Troj/Mdrop-BRT attempts to exploit the Microsoft Office Remote Code Execution Using a Malformed Routing Slip vulnerability' (MS06-012) in order to execute shell code when the PowerPoint file is opened.

This shell code attempts to drop and run a malicious Windows executable (detected separately).

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer