Cloud Antivirus > Monitor de Atividades > 1Table.A

Detalhes de1Table.A

Todos os detlahes, descrição e efeitos do vírus 1Table.A

CLOUD ANTIVIRUS - Share/Bookmark
Nomes comuns: 1Table.A
Nomes técnicos:
Alias: trojan.mdropper.h, W97M_MDROPPER,
   
Tipo: TROJAN
Tamanho: 233472 Bytes
   

DETECTAÇÃO

Número de observações:
Data da primeira observação: May 20, 2006 at 00:00 AM
Primeira observação do país em:
Última observação do país em:
   

Brief Description

1Table.A is a Trojan that drops one of the following variants of the backdoor Gusi in the affected computer:

  • Bck/Gusi.A
  • Bck/Gusi.B

In order to do so, it exploits a vulnerability in Microsoft Word due to a buffer overflow, which allows arbitrary code to be executed with the same privileges as the logged on user.

1Table.A does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer.

To date at least two Word documents have been found to have reached computers via email, though other means cannot be ruled out, such as websites or P2P networks, etc.

It is also recommended to be careful with other Office documents, as they may contain inside an embedded Word document.

 

If Word, Word Viewer or Works Suite is installed on your computer, it is recommended that you access Microsoft's official website and check if you have any of the vulnerable versions installed. In such case, download and install the security patch. Click here to access the web page for downloading the patch.

Effects

1Table.A drops one of the following variants of the backdoor Gusi in the affected computer:

  • Bck/Gusi.A
  • Bck/Gusi.B

In order to do so, it exploits a vulnerability in Microsoft Word due to a buffer overflow, which allows arbitrary code to be executed with the same privileges as the logged on user.

 

If Word, Word Viewer or Works Suite is installed on your computer, it is recommended that you access Microsoft's official website and check if you have any of the vulnerable versions installed. In such case, download and install the security patch. Click here to access the web page for downloading the patch.

http://www.pandasecurity.com/homeusers/security-info/about-malware/encyclopedia/overview.aspx?idvirus=Mais informações sobre 1Table.A na Enciclopédia