To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

Malware Overview
This Trojan may be downloaded unknowingly by a user when visiting malicious Web sites.
It takes advantage of an unknown vulnerability in MS PowerPoint in order to drop possibly malicious files. The dropped files are detected by Trend Micro as the following:

• BKDR_PCCLIEN.AFR
• BKDR_PCCLIEN.BBCBKDR_PCCLIEN.BBD

It then executes the dropped file(s). As a result, malicious routines of the dropped files are exhibited on the affected system.


More...