Trojan exploits unpatched PowerPoint vulnerability