Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Jan 27, 2010 | Updated Sep 15, 2017

Trojan:Win32/Alvabrig.A

Detected by Microsoft Defender Antivirus

Aliases: W32/Trojan3.XU (Command) W32/Malware.FKFJ (Norman) Trojan.Bankpatch.Gen (VirusBuster) Trojan horse Pakes.ATG (AVG) Win32/Spy.Bankpatch.AG (ESET) Trojan-Banker.Win32.MultiBanker (Ikarus) Trojan-Banker.Win32.MultiBanker.at (Kaspersky) PWS-Bankpatch.gen (McAfee) Hacktool/Patcher.D (Panda) Troj/BankPh-Gen (Sophos) Trojan.Win32.Patched.eu (Sunbelt Software) Trojan.Bankpatch.C (Symantec)

Summary

Trojan:Win32/Alvabrig.A is a trojan that modifies certain Windows files. It may also drop other malware, steal sensitive data and download arbitrary files from certain Web sites. In some instances it also disables System Restore.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
 
Additional remediation steps for Virus:Win32/Alvabrig.gen!D
Important: Trojan:Win32/Alvabrig.A makes lasting changes to system files that will NOT be restored by detecting and removing this threat. To return an infected computer to its pre-infected state, files detected as Virus:Win32/Alvabrig.gen!D must be restored from backup.
 
 
Trojan:Win32/Alvabrig.A may make additional lasting changes to infected files that will NOT be restored by detecting and removing this threat. In order to return an infected computer to its pre-infected state, refer to the following articles:
 
Trojan:Win32/Alvabrig.A attempts to steal sensitive and confidential information from affected users to perpetrate fraud. If you believe that your personal financial information may have been compromised, please refer to the following advisory for additional advice:
Follow us