TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
PE_PATCHED.EC
Overview

Malware type: File infector

Aliases: No Alias Found

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Medium

Distribution potential:

Low

Description: 

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

PE_PATCHED.EC Behavior Diagram

Malware Overview

This file infector may be downloaded unknowingly by a user when visiting malicious Web sites.

This is the Trend Micro detection for copies of the legitimate Windows file USER32.DLL which have been injected with a malicious code. The patching of the said legitimate file was made as part of the autostart technique of the main component file, or possibly other component files.

For additional information about this threat, see:
Solution
Technical Details

Description created: Aug. 12, 2008 1:24:32 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.