Bloodhound.Exploit.15

Bloodhound.Exploit.15 is a heuristic detection for malformed GRP files that are potentially related to the Program Group Converter Vulnerability, which is described in Microsoft Security Bulletin MS04-037.

The files that are detected as Bloodhound.Exploit.15 may be malicious, or they may be the result of corruption. We suggest that you submit to Symantec Security Response any files that are detected as Bloodhound.Exploit.15. For instructions on how to do this using Scan and Deliver, read "How to submit a file to Symantec Security Response using Scan and Deliver."

Protection

• Initial Rapid Release version October 12, 2004
• Latest Rapid Release version October 12, 2004
• Initial Daily Certified version October 12, 2004
• Latest Daily Certified version October 12, 2004
• Initial Weekly Certified release date October 12, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low