ThreatExpert's Statistics for BehavesLike.Win32.ExplorerHijack [Ikarus]:

BehavesLike.Win32.ExplorerHijack [Ikarus] is also known as:

Threat Alias Number of Incidents Generic.dx [McAfee] 9 Virus.Win32.Afgan.a [Kaspersky Lab] 7 Virus:Win32/Afgar.A [Microsoft] 7 W32.Imalag.B [Symantec] 7 Mal/Packer [Sophos] 5 PE_BUREY.A-1 [Trend Micro] 4 VirTool:Win32/DelfInject.gen!X [Microsoft] 4 Mal/Generic-A [Sophos] 3 New Malware.aq [McAfee] 3 PE_BUREY.A [Trend Micro] 3 Downloader [Symantec] 2 Infostealer [Symantec] 2 Infostealer.Onlinegame [Symantec] 2 Mal/Dropper-G [Sophos] 2 Mal/EncPk-CR [Sophos] 2 PWS-Mmorpg.gen [McAfee] 2 Trojan.Win32.Agent.aseg [Kaspersky Lab] 2 Trojan-PSW.Generic [PC Tools] 2 VirTool:Win32/DelfInject.gen!L [Microsoft] 2 Virus.Win32.Agent.ch [Kaspersky Lab] 2 Backdoor.Win32.Agent.vce [Kaspersky Lab] 1 Backdoor.Win32.Poison.kph [Kaspersky Lab] 1 Generic Downloader.x [McAfee] 1 Infostealer.Gampass [Symantec] 1 Mal/Behav-010, Mal/Dropper-AB, Mal/Behav-027 [Sophos] 1 Mal/Emogen-Y, Mal/Behav-009 [Sophos] 1 Troj/Dloadr-BUD [Sophos] 1 Trojan Horse [Symantec] 1 Trojan.Flush.G [Symantec] 1 Trojan.Ozdok [Symantec] 1 Trojan.Ozdok!sd6 [PC Tools] 1 Trojan.Win32.Agent.afgn [Kaspersky Lab] 1 Trojan.Win32.Agent.amic [Kaspersky Lab] 1 Trojan.Win32.Agent.atcw [Kaspersky Lab] 1 Trojan:Win32/AgentBypass.gen!I [Microsoft] 1 Trojan:Win32/Malagent [Microsoft] 1 Trojan-Downloader.Agent.A!ct [PC Tools] 1 Trojan-Downloader.Win32.Agent.aotc [Kaspersky Lab] 1 Trojan-Downloader.Win32.Agent.bcos [Kaspersky Lab] 1 Trojan-Downloader.Win32.Agent.sri [Kaspersky Lab] 1 TrojanDownloader:Win32/Small.gen!AP [Microsoft] 1 Trojan-GameThief.Win32.OnLineGames.txdo [Kaspersky Lab] 1 VirTool:Win32/Injector.gen!G [Microsoft] 1 VirTool:Win32/VB [Microsoft] 1 W32.Spybot.Worm [Symantec] 1 Win-Trojan/Xema.variant [AhnLab] 1 Win-Trojan/ZBot.87040.B [AhnLab] 1 WORM_AUTORUN.DAR [Trend Micro] 1

BehavesLike.Win32.ExplorerHijack [Ikarus] has the following possible countries of origin:

Origin Number of Incidents Spain 4 China 3 Russian Federation 3 Republic of Korea 1 Taiwan 1

BehavesLike.Win32.ExplorerHijack [Ikarus] is known to be created as:

%System%\google.exe %System%\mmx5387c.exe %System%\mmx59e6a.exe %System%\mmx59e99.exe %System%\sdra64.exe %System%\server.exe %System%\smx58bfb.exe %System%\smx58c2a.exe %System%\utbox\addons\cmkey.exe %System%\wincom_.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).