Home / malware

PDF

Trojan.Win32.Patched

First posted on 01 March 2007.
Source: SecurityHome

Aliases :

Trojan.Win32.Patched is also known as Trojan:W32/Patched.

Explanation :

Files detected as "Trojan.Win32.Patched" are usually Windows components that are patched by a malicious application. The purpose of patching varies. For example, certain malware patches system components in order to disable security, such as the Windows Safe File Check feature. Other malware can add parts of its code to a system component and then patch certain functions of the original file to point to an appended code. The most frequently patched components are:

winlogon.exe
wininet.dll
kernel32.dll
iexplore.exe

Last update 01 March 2007

 

TOP