Threat Search: 

ThreatExpert's Statistics for BackDoor-CZP.dr [McAfee]:

BackDoor-CZP.dr [McAfee] is also known as:
Threat AliasNumber of Incidents
Backdoor.Trojan [Symantec]120
Backdoor.Win32.Turkojan.il [Kaspersky Lab]106
Backdoor.Turkojan.I [PC Tools]104
Backdoor:Win32/Turkojan.AI [Microsoft]87
Trojan-Dropper.Delf [Ikarus]84
Troj/Agent-GMF [Sophos]65
Backdoor.Win32.Turkojan.r [Kaspersky Lab]63
Win-Trojan/Turkojan.276992 [AhnLab]63
W32.IRCBot.Gen [Symantec]62
Win-Trojan/Turkojan.307712 [AhnLab]41
Downloader.Delphi [Ikarus]38
Mal/Generic-E, Mal/Behav-333 [Sophos]30
Backdoor.Turkojan.Gen [PC Tools]25
Backdoor.Turkojan.il [PC Tools]25
Mal/Turko-A, Mal/Behav-333 [Sophos]24
Trojan.IRCBot [PC Tools]14
Backdoor.Turkojan!sd6 [PC Tools]9
Backdoor.Win32.Turkojan.akt [Kaspersky Lab]9
Backdoor.Win32.Turkojan.amr [Kaspersky Lab]9
BKDR_TURKOJAN.AL [Trend Micro]9
Troj/Turkoj-Gen [Sophos]9
Trojan Horse [Symantec]8
Win-Trojan/Turkojan.277504.C [AhnLab]8
Backdoor.Turkojan [Symantec]6
Win-Trojan/Turkojan.1527646 [AhnLab]6
Backdoor.Trojan [PC Tools]4
Backdoor.Win32.Turkojan.amr [Ikarus]3
Mal/Behav-333 [Sophos]2
Backdoor.Turkojan [PC Tools]1
Backdoor.Win32.Turkojan.ags [Kaspersky Lab]1
Backdoor.Win32.Turkojan.aka [Kaspersky Lab]1
Backdoor.Win32.Turkojan.sv [Kaspersky Lab]1
Downloader [Symantec]1
Mal/Behav-103, Mal/Behav-043, Mal/HckPk-A [Sophos]1
Mal/Generic-A [Sophos]1
Packed.Win32.Black.a [Kaspersky Lab]1
PE_SALITY.EK [Trend Micro]1
Suspicious.MH690 [Symantec]1
Virus.Win32.Sality.aa [Kaspersky Lab]1
Virus.Win32.Turkojan [Ikarus]1
Virus:Win32/Sality.AM [Microsoft]1
W32/Sality-AM [Sophos]1
Win32/Kashu.B [AhnLab]1
Win-Trojan/Turkojan.122880.C [AhnLab]1
Win-Trojan/Turkojan.138752.B [AhnLab]1

BackDoor-CZP.dr [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
Netherlands3
United Kingdom1

BackDoor-CZP.dr [McAfee] is known to be created as:
%System%\guezzoun.scr
%System%\server.exe
%Temp%\88321.exe
%Temp%\asadfg43rwaef.exe
%Temp%\decrypted.exe
%Temp%\explore.exe
%Temp%\liym.exe
%Temp%\manual.exe
%Temp%\rarsfx0\f.exe
%Temp%\server.exe
%Temp%\services.exe
%Temp%\sis.exe
%Temp%\test1.exe
%Temp%\turkojan4.exe
%Temp%\ufosmbriog.exe
%Temp%\zzzzz.exe
%Windir%\alg.exe
%Windir%\ctfmon.exe
%Windir%\ergerg.exe
%Windir%\exploror.exe
%Windir%\hamoode.exe
%Windir%\iexplorer.exe
%Windir%\kasper.exe
%Windir%\msnh.exe
%Windir%\msnmessenger.exe
%Windir%\msstwain32.exe
%Windir%\mstwain31.exe
%Windir%\mstwain32.exe
%Windir%\msvcnu.exe
%Windir%\msvcnu32.exe
%Windir%\server.exe
%Windir%\smss.exe
%Windir%\svchost.exe
%Windir%\svhost.exe
%Windir%\system.exe
%Windir%\system32x6.exe
%Windir%\systeme32.exe
%Windir%\turkojan4.0.exe
%Windir%\winlogon.exe
%Windir%\winlogon1.exe
%Windir%\xmss.exe
c:\0jpz.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.