Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Win32/Patched.BK

Aliases:Trojan.Win32.Patched.hi (Kaspersky), Trojan.Patched.id.1 (McAfee) 
Type of infiltration:Trojan  
Size:989696 B 
Affected platforms:Microsoft Windows 
Signature database version:4422 (20090913) 

Short description

Win32/Patched.BK is the detection name for the system file Kernel32.dll that was modified by malware. The trojan will attempt to download several files from the Internet. The files are then executed.

Other information

Win32/Patched.BK is the detection name for the system file Kernel32.dll that was modified by malware.

The modified file Kernel32.dll contains the original program code along with the program code of the infiltration.

The program code of the following Windows APIs is changed:
  • GetProcAddress (Kernel32.dll)
The trojan contains a list of URLs.

It tries to download several files from the addresses.

The files are then executed.