Malware type: Trojan

Aliases: No Alias Found

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Description: 

This Trojan arrives as attachment to email messages spammed by another malware or a malicious user. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It is a specially-crafted .PDF file that exploits a known vulnerability in Adobe Reader 9.0 and earlier versions. This vulnerability may cause the said application to crash and may also allow a remote malicious user to take control over an affected system when a user views the said file. More information on the said vulnerability may be found here.

After successfully exploiting the vulnerability, it attempts to drop and execute a file detected as TSPY_KUPS.A. As a result, malicious routines of the dropped file are exhibited on the affected system.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 1, 2009 9:40:01 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.