Infopirate.org

This Trojan is a specially crafted .PDF file that exploits a known vulnerability in Acrobat Reader 8.1.1 or earlier versions. This vulnerability would cause the application to crash and could potentially allow a malicious user to take control of the affected system.

More information about the said vulnerability can be found on this Web page.

This Trojan arrives as attachment to email messages spammed by another malware or a malicious user.

It drops files.

This PDF file exploits a known vulnerability in Acrobat Reader 8.1.1 or earlier versions.

The application could crash or a remote attacker could take control of the affected system when an unsuspecting user views a particular PDF file.

This Trojan arrives as attachment to email messages spammed by another malware or a malicious user.

This is a specially crafted Microsoft Excel document that takes advantage of a known software vulnerability to drop possibly malicious files. More information on the said vulnerability can be found here.

This vulnerability causes Microsoft Excel to crash and could potentially allow a remote user to take control of the affected system.

This Trojan may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It creates registry key(s)/entry(ies) as part of its installation routine.

It drops component files. It then executes the dropped file(s). As a result, malicious routines of the dropped files are exhibited on the affected system.

It opens a hidden Internet Explorer window to connect to a malicious URL to possibly download and execute a malicious file.

This Trojan arrives on a system as a .PPS/.PPT file that is dropped by other malware. It can also be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, it dropsseveral files, some of which are detected as BKDR_AGENT.ADGS.

A dropped .TMP file is then injected into a running process to remain memory resident. As a result, routines of the dropped file are also exhibited on the affected system. To automate execution of the dropped malicious file, it also adds a registry entry.