W32/Ppdropper.G is a trojan. The trojan will infect Windows systems.

The trojan will arrive as a dropped file of another malware or as a downloaded file from the Internet.

Upon execution, this trojan exploits Microsoft Office Remote Code Execution using a Malformed Routing Slip Vulnerability as explained in Microsoft Security Bulletin MS06-012 wherein a specially crafted .ppt file can cause the application to drop and execute an embedded executable file.

Upon successful exploitation of the said vulnerability, the trojan will drop and execute a file.

Due to bugs in its code, the dropped file is not executed properly. Thus, its unable to exploit the vulnerability and perform its intended file dropping routine.

Microsoft has released a patch for this MS06-012 vulnerability. It can be downloaded from the following link;

http://www.microsoft.com/technet/security/bulletin/MS06-012.mspx

You can check your system for other Windows Vulnerabilities using the Protector Plus - Windows Vulnerability Scanner. It guides you to update with the right patch to make your system secure.

You can download and learn more about Protector Plus - Windows Vulnerability Scanner at the following location:

http://www.protectorplus.com/download/winvulscan.htm

This trojan first appeared on September 14, 2006.

 Other names of W32/Ppdropper.G Trojan:

This trojan is also known as TROJ_PPDROPPER.G.