Remove Trojan.Mdropper.AC

Posted on: February 26th, 2009

Discovered: February 23, 2009
Updated:

February 24, 2009 2:05:20 PM
Type:

Trojan
Systems Affected:

Windows XP, Windows Vista
Recommended Action:

In order to remove Remove Trojan.Mdropper.AC you need to Download the ‘No Adware’ remover software. Based on our testing this was the best peforming remover of Trojan.Mdropper.AC..

You will see the download link on their website, once installed it will perform a full system scan on your machine for free.
Technical Details:
When the Trojan executes, it may exploit the Microsoft Excel Unspecified Remote Code Execution Vulnerability (BID 33870).

It then drops the following file:
%Temp%\rundll.exe (a copy of Downloader)

The Trojan may then attempt to download more files on to the compromised computer from the following locations:

* [http://]61.59.24.55/sb.php?id=[19 RANDOM ASCII CHARACTERS]
* [http://]61.59.24.45/sb.php?id=[19 RANDOM ASCII CHARACTERS]
* [http://]61.221.40.63/sb.php?id=[19 RANDOM ASCII CHARACTERS]
Action Steps:
FREE SCAN: NoAdware can remove Trojan.Mdropper.AC. Click the link below for your free download & scan your PC now.

MANUAL REMOVAL: Please click here for manual removal instructions.

Posted on Thursday, February 26th, 2009 at 11:27 am - filed under Adware, Blog, Trojan, Virus.