Threat Search: 

ThreatExpert's Statistics for Virus:Win32/Mariofev.A [Microsoft]:

Virus:Win32/Mariofev.A [Microsoft] is also known as:
Threat AliasNumber of Incidents
Troj/User32Hk-A [Sophos]239
Trojan.Patched!sd6 [PC Tools]144
Patched User32 [McAfee]128
Trojan.Win32.Patched.bb [Kaspersky Lab]99
Trojan.Win32.Patched.dr [Kaspersky Lab]96
Win-Trojan/User32Hk [AhnLab]64
Trojan.Win32.Patched [Ikarus]51
Trojan.Win32.Patched.gq [Kaspersky Lab]39
Generic.dx [McAfee]9
Trojan.Win32.Patched.bb [Ikarus]2
Trojan.Win32.Patched.dr [Ikarus]2
TROJ_PATCHED.BC [Trend Micro]1
Trojan.Patched!sd5 [PC Tools]1
W32.Spamuzle!inf [Symantec]1

Virus:Win32/Mariofev.A [Microsoft] has the following possible countries of origin:
OriginNumber of Incidents
Czech Republic1
Denmark1
Italy1
Poland1

Virus:Win32/Mariofev.A [Microsoft] is known to be created as:
%System%\dllcache\user32.dll
%Temp%\infected\user32.dll
%Temp%\windows\system32\user32.dll
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).