TROJ_MSJET.C

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

Malware Overview

This Trojan is a Microsoft Database (MDB) file that may be launched by a malicious .DOC file as a mail-merge file once the said document is opened.

Upon execution, it uses a known vulnerability to parse the .DOC file. This routine allows the said .DOC file to drop an embedded malicious .EXE file.

For more information regarding the said vulnerability, refer to the following Microsoft Web pages:

• Microsoft Security Advisory (950627)

Related Items