Threat Search: 

ThreatExpert's Statistics for BackDoor-AVW [McAfee]:

BackDoor-AVW [McAfee] is also known as:
Threat AliasNumber of Incidents
Backdoor.Prorat [Symantec]131,876
Backdoor.ProRAT.K [PC Tools]75,177
Troj/Prorat-19 [Sophos]64,130
BKDR_AVW.A [Trend Micro]62,611
Backdoor.Win32.Prorat.19.ah [Kaspersky Lab]61,000
Backdoor.Win32.Prorat [Ikarus]48,841
Backdoor.Prorat!sd5 [PC Tools]43,504
Backdoor.ProRat [PC Tools]41,536
W32.IRCBot.Gen [Symantec]37,454
BKDR_PRORAT.I [Trend Micro]31,753
Backdoor.Win32.Prorat.19.aep [Kaspersky Lab]31,500
Backdoor:Win32/Prorat.Y [Microsoft]31,016
Backdoor:Win32/Prorat.I [Microsoft]31,000
Backdoor.Win32.Prorat.19.i [Kaspersky Lab]28,528
BKDR_PRORAT.BL [Trend Micro]24,346
Troj/Prorat-AZ [Sophos]22,421
Backdoor.Win32.Prorat.bj [Kaspersky Lab]21,905
Backdoor:Win32/Prorat [Microsoft]21,833
Backdoor.Win32.Prorat.ae [Kaspersky Lab]21,612
Win-Trojan/Prorat.13312.B [AhnLab]17,500
Win-Trojan/Prorat.36864 [AhnLab]17,500
Trojan.KeyLogger.212 [Ikarus]8,288
BKDR_Generic [Trend Micro]7,497
Win-Trojan/Prorat.24576.E [AhnLab]5,624
Win-Trojan/Prorat.36864.B [AhnLab]5,587
BKDR_PRORAT.F [Trend Micro]1,235
Backdoor:Win32/Prorat.1_9 [Microsoft]1,172
Backdoor.Win32.Prorat.19.al [Kaspersky Lab]1,117
Backdoor.Win32.Prorat.kw [Kaspersky Lab]960
Backdoor.Win32.Prorat.19 [Ikarus]768
Troj/Prorat-H [Sophos]666
Troj/Prorat-L [Sophos]613
Trojan-Spy.Win32.ProAgent.21 [Kaspersky Lab]342
TROJ_AVW.N [Trend Micro]323
BKDR_PRORAT.AB [Trend Micro]306
Trojan Horse [Symantec]286
Backdoor.Prorat.AR1 [PC Tools]261
BKDR_PRORAT.19 [Trend Micro]224
Trojan-Spy.Win32.ProAgent.20 [Ikarus]191
Troj/Progent-P [Sophos]190
TrojanSpy:Win32/ProAgent.O [Microsoft]190
Backdoor.Win32.Prorat.191 [Kaspersky Lab]169
Win-Trojan/Prorat.13312 [AhnLab]162
BKDR_PRORAT.M [Trend Micro]143
Backdoor:Win32/Prorat.L [Microsoft]120
Win-Trojan/ProAgent.20480 [AhnLab]114
Backdoor:Win32/Small [Microsoft]108
Backdoor.Win32.Prorat.dz [Kaspersky Lab]107
Backdoor:Win32/Prorat.1_91 [Microsoft]104
Troj/Prorat-J [Sophos]104
Backdoor.Prorat.AX [PC Tools]97
Win-Trojan/Prorat_v19.20992 [AhnLab]96
Trojan.Progent [Symantec]82
Trojan.ProAgent [PC Tools]81
Trojan-Spy.Win32.ProAgent.k [Kaspersky Lab]72
Backdoor:Win32/Prorat.K [Microsoft]51
Mal/Prorat-B, Troj/Prorat-Fam [Sophos]50
Backdoor.Win32.VB [Ikarus]43
Win-Trojan/Prorat.20992 [AhnLab]39
Troj/Prorat-Fam [Sophos]38
HackTool.Win32.ProRat.a [Kaspersky Lab]36
Virus.Win32.Prorat.AW [Ikarus]34
Backdoor:Win32/Prorat.P [Microsoft]30
Mal/Prorat-A [Sophos]28
Win-Trojan/Prorat.2968576 [AhnLab]24
Backdoor.Prorat.AE [PC Tools]19
Backdoor.Win32.Prorat.19 [Kaspersky Lab]19
Win-Trojan/Prorat.350764.C [AhnLab]18
Backdoor.Prorat.DH [PC Tools]17
Backdoor.Win32.Prorat.19.k [Kaspersky Lab]17
Backdoor.Prorat.HC [PC Tools]16
Win-Trojan/Prorat.350764.G [AhnLab]16
Win-Trojan/Prorat.350764.K [AhnLab]16
Win-Trojan/Prorat.350764 [AhnLab]15
Mal/Generic-E, Mal/Behav-004, Mal/Prorat-B, Troj/Prorat-Fam [Sophos]13
Backdoor.Win32.Prorat.b [Kaspersky Lab]12
BKDR_PRORAT.K [Trend Micro]12
Mal/Generic-A [Sophos]12
Backdoor.Prorat.AJ [PC Tools]11
Backdoor.Win32.Prorat.mj [Kaspersky Lab]11
Backdoor:Win32/Prorat.AM [Microsoft]11
Mal/Behav-004, Mal/Prorat-B, Troj/Prorat-Fam [Sophos]10
Virus.Win32.Prorat [Ikarus]10
Win-Trojan/Proagent.20480.F [AhnLab]9
Troj/Prorat-K [Sophos]7
Win-Trojan/Prorat.349228.B [AhnLab]7
Backdoor:Win32/Prorat.N [Microsoft]6
Backdoor:Win32/Prorat.T [Microsoft]6
Win-Trojan/Prorat.349228.O [AhnLab]6
Win-Trojan/Prorat.350764.D [AhnLab]6
Backdoor.Prorat [PC Tools]5
Backdoor.Win32.VB.aoi [Kaspersky Lab]5
Mal/Prorat-B [Sophos]5
Win32.SuspectCrc [Ikarus]5
Backdoor.Prorat.BJZ [PC Tools]4
Backdoor.Trojan [Symantec]4
Win-Trojan/Prorat.352117 [AhnLab]4
Backdoor.Prorat.AR [PC Tools]3
Trojan-Dropper.Agent [Ikarus]3
Win-Trojan/Prorat.349228.E [AhnLab]3

BackDoor-AVW [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
Turkey7
Bulgaria2
Israel1
New Zealand1
Russian Federation1
Spain1
United Kingdom1

BackDoor-AVW [McAfee] is known to be created as:
%ProgramFiles%\i8tech\system guard\mpdl.dll
%System%\_dxdiag.exe
%System%\_key.dll
%System%\ffservice.exe
%System%\fire-fox.exe
%System%\fservice.exe
%System%\incom.exe
%System%\lncom.exe
%System%\lncom_.exe
%System%\reginv.dll
%System%\server.exe
%System%\winkey.dll
%System%\wservice.exe
%Temp%\inst_server.exe
%Temp%\rarsfx0\server.exe
%Temp%\server.exe
%Temp%\setup.exe.exe
%UserProfile%\instmsng.dll
%Windir%\dxdiag.exe
%Windir%\kurlmon.dll
%Windir%\msnadmin.exe
%Windir%\services.exe
%Windir%\system\anti_vir.exe
%Windir%\system\rservicd.exe
%Windir%\system\sservice.exe
c:\server.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.