ACM_PASDOC.JNP
PLATFORM:
Windows 2000, Windows XP, Windows Server 2003
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TECHNICAL DETAILS
File Size:
1,766 bytes
File Type:
LSP
Initial Samples Received Date:
27 Jan 2012
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
NOTES:
This is the Trend Micro detection for a specially crafted AutoCAD LISP script file.
Upon execution, this AutoCAD macro file searches for the file BASE.DCL in the AutoCAD path. It then searches for the file ACADDOC.LSP in the same folder. If found, it then replaces the contents of the file ACADDOC.LSP with its content.