Trojan.Mdropper.E

Trojan.Mdropper.E is a Trojan horse that exploits the Microsoft Word Macro Name Handler Buffer Overflow Vulnerability (BID 8835) and drops a file on the compromised computer.

When a user opens a malicious Microsoft Word document, the Microsoft Word Macro Name Handler Buffer Overflow Vulnerability (BID 8835) is exploited.

This causes the attacker-supplied arbitrary code to execute on the newly compromised computer.

The Trojan may then drop and execute one of the following files, which are typically variants of the Backdoor.Trojan or Backdoor.Femo families:
%Temp%\arc.exe
%System%\rdpclip32.exe
%System%\rdpclip32.dll
%System%\rdpclip32.dat

Summary