W32/Mdropper.BI Trojan

 Virus Information - W32/Mdropper.BI Trojan:

W32/Mdropper.BI is a trojan. The trojan will infect Windows systems.

The trojan will arrive as a dropped file of another malware, or as a downloaded file from the Internet. It may also arrive as an attachment to a spammed email.

Upon execution, the trojan exploits a vulnerability in MS Office(Microsoft Security Bulletin MS06-047) wherein a specially crafted .xls file can cause the application to drop and execute an embedded executable file.

Once it successfully exploits the said vulnerability, it executes a code that automatically runs an embedded .EXE file on the affected system. This allows the dropped trojan to perform its malicious routines on the system.