TROJ_PIDIEF.WWP

This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It may be unknowingly downloaded by a user while visiting malicious websites.

It executes the dropped file(s). As a result, malicious routines of the dropped files are exhibited on the affected system.

Once a malware successfully exploits the said vulnerability, it causes certain actions to be done on the system.

Arrival Details

This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.

It may be unknowingly downloaded by a user while visiting malicious websites.

Dropping Routine

This Trojan takes advantage of the following software vulnerabilities to drop malicious files:

• CVE-2010-1297

It executes the dropped file(s). As a result, malicious routines of the dropped files are exhibited on the affected system.

Other Details

Once a malware successfully exploits the said vulnerability, it causes the following actions to be done on the system:

• Drops another malicious file detected by Trend Micro as TROJ_DLOADR.AWN:
• %User Temp%\java.exe

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003.)