Analysis by: Karl Dominguez
 PLATFORM:

Windows 2000, XP, Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This is a Trend Micro generic detection for specially crafted Microsoft Office documents that exploits CVE-2006-3059 to allow remote attackers to execute arbitrary commands in the affected system. Visit the following sites for more information regarding this vulnerability:

If your Trend Micro product detects a file under this detection name, do not execute the file. Delete it immediately especially if it came from an untrusted or an unknown source (e.g., a website of doubtful nature).

However, if you have reason to believe that the detected file is non-malicious, you can submit a sample for analysis. Detailed analysis will be done on submitted samples, and corresponding removal instructions will be provided, if necessary.

  SOLUTION

Minimum Scan Engine: 8.900

NOTES:
Submitting Samples For support on detected files, samples may be submitted to Trend Micro.

For Premium Customers, please visit the following site:

For non-Premium Customers, please visit the following site:


Did this description help? Tell us how we did.