Encyclopedia entry
Updated:
Apr 17, 2011
| Published:
Mar 13, 2008
Aliases
Win-Trojan/Patch.71133
(AhnLab)
-
Suspicious_F.gen
(Norman)
-
Troj/Patch-F
(Sophos)
-
Trojan.Patch.F
(Sunbelt Software)
-
Trojan.Keygen.Q
(other)
Alert Level
(?)
Moderate
Antimalware protection details
Microsoft recommends that you download the
latest definitions
to get protected.
Detection last updated:
Definition: 1.79.1553.0
Released: Apr 10, 2010
|
|
Detection initially created:
Definition: 1.45.287.0
Released: Oct 07, 2008
|
Summary
HackTool:Win32/Patch.A is a generic detection for a series of hacking tools intended to "patch" programs that may be evaluation copies, or unregistered versions with limited features.
Symptoms
HackTool:Win32/Patch.A is a user interactive program that does not automatically run at Windows start, or run as a hidden process.
Technical Information (Analysis)
HackTool:Win32/Patch.A is a generic detection for a series of hacking tools intended to "patch" programs that may be evaluation copies, or unregistered versions with limited features.
Installation
When run, this tool may create the file "<system folder>\bassmod.dll", which is non-malicious. Win32/Patch may display several different user interface dialogs, as can be seen in the examples shown below:
Additional Information
It is recommended that you do not run applications detected as HackTool:Win32/Patch.A, as they may be associated with other malicious, or potentially unwanted applications.
Analysis by Wei Li
Prevention
Recovery
