Threat Search: 

ThreatExpert's Statistics for BackDoor-CKB.dr [McAfee]:

BackDoor-CKB.dr [McAfee] is also known as:
Threat AliasNumber of Incidents
Backdoor:Win32/PcClient.AI [Microsoft]27
BKDR_PCCLIEN.AFR [Trend Micro]20
Backdoor.Formador [Symantec]18
Backdoor.Win32.PcClient [Ikarus]15
Trojan.Crypt [Ikarus]12
Troj/PcClien-NH [Sophos]9
Backdoor.PcClient.Gen.3 [PC Tools]8
Mal/PCClient-Q [Sophos]7
Trojan.Dropper [Symantec]5
Backdoor.Pcclient [Symantec]3
Mal/UnkPack-Fam [Sophos]3
Win-Trojan/PcClient.11296 [AhnLab]3
Backdoor.Formador [PC Tools]2
Backdoor.PcClient.prz [PC Tools]2
Backdoor.Win32.PcClient.emd [Kaspersky Lab]2
Backdoor:Win32/PcClient [Microsoft]2
Troj/Mejdho-Gen, Troj/PcClien-NH [Sophos]2
Win-Trojan/PcClient.63264 [AhnLab]2
Backdoor.PcClient!sd5 [PC Tools]1
Backdoor.Win32.PcClient.acbt [Kaspersky Lab]1
Backdoor.Win32.PcClient.aebs [Kaspersky Lab]1
Backdoor.Win32.PcClient.afun [Kaspersky Lab]1
Backdoor.Win32.PcClient.aizw [Kaspersky Lab]1
Backdoor.Win32.PcClient.alcd [Kaspersky Lab]1
Backdoor.Win32.PcClient.alda [Kaspersky Lab]1
Backdoor.Win32.PcClient.aluc [Kaspersky Lab]1
Backdoor.Win32.PcClient.aogu [Kaspersky Lab]1
Backdoor.Win32.PcClient.aojd [Kaspersky Lab]1
Backdoor.Win32.PcClient.avxs [Kaspersky Lab]1
Backdoor.Win32.PcClient.bdxy [Kaspersky Lab]1
Backdoor.Win32.PcClient.cksh [Kaspersky Lab]1
Backdoor.Win32.PcClient.ckuz [Kaspersky Lab]1
Backdoor.Win32.PcClient.clwn [Kaspersky Lab]1
Backdoor.Win32.PcClient.dnoo [Kaspersky Lab]1
Backdoor.Win32.PcClient.is [Kaspersky Lab]1
Backdoor.Win32.PcClient.rr [Kaspersky Lab]1
Backdoor.Win32.PcClient.yw [Kaspersky Lab]1
Backdoor:Win32/PcClient.AA [Microsoft]1
Backdoor:Win32/PcClient.AI.dll [Microsoft]1
Backdoor:Win32/PcClient.DF [Microsoft]1
Backdoor:Win32/PcClient.T [Microsoft]1
BKDR_PCCLIENT.RJ [Trend Micro]1
BKDR_PCCLIENT.XY [Trend Micro]1
Infostealer [Symantec]1
Keylogger.Mose [Symantec]1
Mal/Basine-A, Mal/Behav-160, Mal/Emogen-E, Mal/Behav-009, Mal/Basine-C [Sophos]1
Mal/Emogen-E [Sophos]1
Mal/Generic-A [Sophos]1
P2P-Worm.Win32.Delf.AR [Ikarus]1
Packed.Generic.181 [Symantec]1
Troj/Dropper-BN [Sophos]1
Troj/Mejdho-Gen, Troj/PcClie-Gen, Troj/PcClien-MR [Sophos]1
Troj/PcClien-MU [Sophos]1
TROJ_DELF.LP [Trend Micro]1
TROJ_Generic [Trend Micro]1
Trojan Horse [Symantec]1
Trojan.Win32.Agent.avo [Kaspersky Lab]1
Trojan-Dropper.Win32.Agent.aytz [Kaspersky Lab]1
Trojan-Dropper.Win32.Delf.jz [Kaspersky Lab]1
TrojanDropper:Win32/Delf [Microsoft]1
Trojan-Spy.Agent!sd5 [PC Tools]1
Virus.Win32.JunkPoly [Ikarus]1
Win-Trojan/PcClient.22216 [AhnLab]1
Win-Trojan/PcClient.22216.C [AhnLab]1
Win-Trojan/PcClient.62779.C [AhnLab]1
Win-Trojan/PcClient.63247.Q [AhnLab]1
Win-Trojan/PcClient.66531.B [AhnLab]1
Win-Trojan/Xema.24576.S [AhnLab]1
Worm.Win32.AutoRun.qqj [Kaspersky Lab]1

BackDoor-CKB.dr [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
China11
Russian Federation1
Taiwan1

BackDoor-CKB.dr [McAfee] is known to be created as:
%System%\dllcache\wuauclt.exe
%System%\wuauclt.exe
%Temp%\abs.exe
%Temp%\rarsfx0\2.exe
%Temp%\wudipp2.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).