Name :	Trojan:BAT/SuspectBehavior_FileDeleted
Detection Names :	Behaveslike:bat.delete Behaveslike:bat
Category:	Malware
Type:	Trojan
Platform:	BAT

The file appears to be suspicious, is potentially undesirable, or may be structured in a way or has characteristics that resembles known malware. This may indicate the presence of a malware infection, or that the suspect file is malicious.

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.


Submitting A Sample for Analysis

If in doubt (for example, a False Positive is suspected), please send a sample to F-Secure Security Labs via the Sample Analysis System for analysis.

Trojan:BAT/SuspectBehavior_FileDeleted is a Heuristic Detection of a file or program that behaves in a suspicious or potentially harmful manner.

This Heuristic Detection indicates that the suspect file performs actions that may potentially delete or otherwise destroy files (.exe, .dll, .ini, .txt, .com) from the following folders: "program files", windows, system32, desktop; and also from windows\command.


Note

This detection may also be displayed using the detection name 'Behaveslike.BAT.Delete'.


About Heuristic Detections

Heuristic Analysis (also known as behavioral analysis) is an advanced type of antivirus technology that evaluates any potential threats by examining a suspected program's intended actions and effects on a computer system.

To examine a program's potential behavior, the antivirus program executes it in a self-contained, "virtual system" environment. This allows the antivirus program to evaluate how the program's behavior affects the virtual system, without compromising or endangering the user's actual system.

A program that appears to perform suspicious or potentially malicious actions will trigger a Heuristic Detection, such as the one above.

For more information, please see the Heuristic description.