Trojan.Tarodrop.D

Trojan.Tarodrop.D is a Trojan horse that that attempts to exploit the JustSystem Ichitaro Unspecified Code Execution vulnerability (BID 25187) in order to steal sensitive information from the compromised computer.

For more information on this vulnerability, see the following entry on the Security Response Weblog:
Unknown Exploit Compromises Ichitaro

Protection

• Initial Rapid Release version August 2, 2007 revision 008
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version August 2, 2007 revision 017
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date August 8, 2007

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Medium
• Payload: Uses a vulnerability to drop more threats on to the compromised computer.

Distribution

• Distribution Level: Low