TROJ_PPDROP.EVL

TROJ_PPDROP.EVL is a Trojan that propagates via an infected MS PowerPoint document. TROJ_PPDROP.EVL is delivered as an attachment to the spam email message by cybercriminals. TROJ_PPDROP.EVL is sent via an infected .PPT file. The malicious MS PowerPoint file is found as TROJ_PPDROP.EVL. The malevolent file drops another malicious file called 'Winword.tmp', which is found as BKDR_SIMBOT.EVL. 'Winword.tmp' encompasses a downloaded Flash file, which exploits a Flash Player vulnerability known as CVE-2011-0611 for dropping the Trojan onto the corrupted machine. TROJ_PPDROP.EVL runs the dropped files.