WM97/ExeDrop-G
WM97/ExeDrop-G is a malware infection that propagates as the malicious Sudoku-making Microsoft Excel spreadsheet. WM97/ExeDrop-G uses sleight-of-hand a to install itself on the targeted computer. Microsoft Office incorporates the powerful programing language Visual Basic for Applications, accessible from Office documents as macros. If a computer user needs to create a puzzle to solve, he/she has to enable macros. To create Sudoku puzzles, an application is required, and to execute the application macros is required. Cybercrooks even give PC users simple instructions on how to help turning macros back on. Once those malicious security measures are bypassed, computer users can solve as many Sudoku as they want. However, in the background a macro installs and runs a malware infection found as WM97/ExeDrop-G. WM97/ExeDrop-G gather system information using particular standard commands that include systeminfo to find out about the affected computer user's operating system, hardware, and patches, ipconfig to receive network information, tasklist for a list of all the applications and services the PC is running. The collected data is then encoded and transmitted via an email to an aol.com address.
SpyHunter Detects & Remove WM97/ExeDrop-G
File System Details
# | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
---|---|---|---|
1. | Will the World End in 2012.pps | 7df5da710c7f9a3533350fa331908494 | 0 |
2. | Will the world end in 2012.msg | fffd66c0983950ba6c866f446924b587 | 0 |
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.