Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Word 2k3 Trojan

Status
Not open for further replies.

eyec

Technical User
Aug 20, 2004
1,493
US
Symantec has designated the Trojan Backdoor.Ginwui, and it has designated the Word 2003 document Trojan.Mdropper.H. The company has listed the details of a registry edit that can reportedly remove the Trojan Backdoor.Ginwui. See the Symantec report for details because this may change with new developments.

The payload of the Word attachment appears to be a Trojan, but few details are available at this time. Opening the e-mail attachment displays a message, but it also opens a backdoor in the background, which then pings an IP address in Asia.

Opening the attachment in Word 2003 installs the Trojan. But in Word 2000, the attachment causes the program to crash instead, and it doesn't run the payload.

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top