Trojan.Patched.B

( Trojan.Win32.Patched.b, TR/Patched.B, W32/Bobax.be, )

SYMPTOMS:

A known executable launches other executables when executed. The size of the infected executable increases with approximately 259 bytes.

TECHNICAL DESCRIPTION:

This is a method for certain trojans to ensure that they get (eventually) executed. Usually malware which wants to ensure that it gets executed at every Windows start, registers itself in one of the documented registry keys / startup folders. However there are some trojans which infect other executable files in such a way that when those are executed, they launch the trojan too. These files may get corrupted, however they don't infect other executable files.

Removal instructions:

Please let BitDefender disinfect your files.

ANALYZED BY:

Attila Balazs, virus researcher