A program or technique that takes advantage of a vulnerability to remotely access or attack a program, computer or server.
Depending on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the suspect file, or ask you for a desired action.
More scanning & removal options
More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.
You may also refer to the Knowledge Base on the F-Secure Community site for more information.
Exploit:W32/XDropper.BR identifies malware that exploits the CVE-2007-0030 vulnerability, using a specially-crafted malicious Excel file.
This malware is also mentioned in our Weblog.
Exploit:W32/Xdropper.BR will drop the following file upon execution:
- %temp%\svchost.exe - detected as Trojan-Dropper:W32/Agent.DJGD
The dropper will drop additional binaries that will download and executes malicious files from:
The URLs are dead during the investigation.