Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Nov 11, 2010 | Updated Sep 15, 2017

Virus:Win32/Bamital.H

Detected by Microsoft Defender Antivirus

Aliases: W32/Bamital.E (Command) Win32/Patched.FS (AVG) TR/Spy.1033728.15 (Avira) Win32.Dat.13 (Dr.Web) Win32/Bamital.EQ (ESET) Virus.Win32.Bamital (Ikarus) Generic.dx!upv (McAfee) Troj/Patched-O (Sophos) Trojan.Win32.Generic!BT (Sunbelt Software)

Summary

Virus:Win32/Bamital.H is the detection for the files "explorer.exe" and "winlogon.exe" when they are infected. The infection is caused by TrojanDropper:Win32/Bamital.C.
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
 
 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Additional recovery instructions
Due to the infection mechanism of this virus, and the fact that it modifies critical system files, Virus:Win32/Bamital.H may make lasting changes to infected files that will NOT be restored by detecting and removing this threat. To return an infected computer to its pre-infected state, files infected by Virus:Win32/Bamital.H must be restored from backup.
 
Follow us