Trojan:Win32/Mariofev.B is a generic detection for a malicious DLL file that is used to inject and execute a malicious payload within other running applications or processes.
Trojan:Win32/Mariofev.B is installed by other malware. In one in-the-wild example, this trojan is installed as a file named "ntcore.dll" in the Windows system folder by a trojan dropper detected as Trojan:Win32/Meredrop.
When run, Trojan:Win32/Mariofev.B unpacks several payloads and writes encrypted component files as in the following examples:
These files are decrypted in memory and injected into other running processes. The payload varies but are usually designed to alter the behavior of the affected processes.
Downloads arbitrary files
The trojan may contact remote servers such as "pilleboats.com" to download arbitrary files that may be detected as other malware.
Analysis by Jireh Sanico
Alert notifications or detections of this malware from installed antivirus or security software may be the only other symptoms.