Exploit.ANI.Cmoo.AX

( Trojan-Downloader.Win32.Ani.g, TrojanDownloader:Win32/Anicmoo.C, Exploit:W32/Ani.C, Exploit-ANIfile.c )

SYMPTOMS:

Internet Explorer crashes unexpectedly when viewing a web page.

TECHNICAL DESCRIPTION:

This is a new vulnerability in the way windows handles the animated cursor (ANI) files, which may lead to arbitrary code execution. This may be exploited by an attacker to execute arbitrary code on the victims machine if the victim is running Internet Explorer.

The exploit tries to download and execute a malicious file.

Microsoft issued a security advisory regarding this vulnerability, which has the number 935423 and can be found at:
http://www.microsoft.com/technet/security/advisory/935423.mspx

Removal instructions:

Please let BitDefender delete this file.

ANALYZED BY:

Mihaly Balazs, virus researcher