TROJ_MSPPOINT.AE

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.



Malware Overview

This Trojan may be dropped by other malware. It may also be downloaded unknowingly by a user when visiting malicious Web sites.

This Trojan takes advantage of the following software vulnerability that allows remote code execution in affected systems:

• Microsoft Security Bulletin MS06-028

A remote attacker may be able to execute arbitrary code on a vulnerable system when an unsuspecting user views a specially crafted PowerPoint document.

Upon execution, this Trojan drops several files, some of which are detected by Trend Micro as TROJ_ARMOR.AC.

Related Items