Symantec.com > Security Response > Trojan.PPDropper.G

Trojan.PPDropper.G

Risk Level 1: Very Low

Printer Friendly Page

Discovered: February 13, 2007
Updated: February 13, 2007 3:12:56 PM
Also Known As: TROJ_MDROPPER.MY [Trend]
Type: Trojan
Infection Length: 1,933,824 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows 2000

Trojan.PPDropper.G is a Trojan that attempts to exploit a previously unknown vulnerability in Microsoft PowerPoint to drop other threats on the compromised computer.

Note: This threat will not execute on computers that have installed the the update for Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (as described in Microsoft Security Bulletin MS07-015).

CVE Reference: CVE-2007-0671

Protection

  • Initial Rapid Release version February 13, 2007
  • Latest Rapid Release version August 20, 2008 revision 017
  • Initial Daily Certified version February 13, 2007
  • Latest Daily Certified version August 20, 2008 revision 016
  • Initial Weekly Certified release date February 14, 2007

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium
  • Payload: Drops additional malware on to the compromised computer.

Distribution

  • Distribution Level: Low

Writeup By: Elia Florio and Paul Mangan
Search by name
Example: W32.Beagle.AG@mm
Norton Internet Security / Norton AntiVirus 2009
Windows Vista Security