Trojan.Win32.Patched.e

tag:Trojans  

This Trojan is a modification of the system winlogon.exe file. Code has been added to the file so that it will attempt to load a DLL file.

C:\WINNT\System32\msdb32.dll

Once the Trojan has attempted to load this file, it will return control to the original file.

  1. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
  2. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

This Trojan is a Windows PE EXE file. The file is 190,976 bytes in size.

Payload

©Virus-Encyclopedia.com All Rights Reserved.