W32/Mdropper.L Trojan

 Virus Information - W32/Mdropper.L Trojan:

W32/Mdropper.L is a trojan. The trojan will infect Windows systems.

The trojan exploits the Microsoft Word Malformed Object Pointer Remote Code Execution Vulnerability as described in Microsoft Security Bulletin MS06-027

The trojan will arrive as a Microsoft Word file attachment along with a spoofed email.

Upon execution, the trojan copies itself as (Random).exe in the Windows Temp folder. It also copies itself as winssi.exe, winmedl.dll, corsv.dll and sporder.dll in the Windows System folder.

The trojan opens the Microsoft Word file to make it appear that it is a justifiable document.