Threat Search: 

ThreatExpert's Statistics for DNSChanger.p [McAfee]:

DNSChanger.p [McAfee] is also known as:
Threat AliasNumber of Incidents
Packed.Win32.TDSS.aa [Kaspersky Lab]34
Trojan:Win32/FakeCog [Microsoft]29
TROJ_FAKEAV.SMSS [Trend Micro]19
FakeAlert-FQ [McAfee]17
CoreGuardAntivirus2009 [Symantec]16
Mal/FakeAV-CB, Mal/TDSSPack-Q [Sophos]15
Win-Trojan/Xema.variant [AhnLab]15
Mal/FakeAV-BP [Sophos]10
WindowsAntivirusPro [Symantec]10
RogueAntiSpyware.WindowsAntivirusPro [PC Tools]9
RogueAntiSpyware.Coreguard Antivirus 2009 [PC Tools]8
RogueAntiSpyware.CoreGuardAntivirus2009 [PC Tools]8
Trojan.Win32.FraudPack.acif [Kaspersky Lab]8
Mal/TDSSPack-Q [Sophos]5
Troj/Agent-MAG [Sophos]4
Trojan.FakeAV [PC Tools]4
Trojan.FakeAV [Symantec]4
Trojan:Win32/InternetAntivirus [Microsoft]4
Mal/Generic-A [Sophos]3
Mal/TDSSPack-Q, Mal/FakeAV-BP [Sophos]3
Trojan:Win32/Alureon.BT [Microsoft]3
Trojan:Win32/Alureon.DA [Microsoft]3
Mal/FakeAV-CB [Sophos]2
Mal/Krap-D, Mal/FakeAV-BP [Sophos]2
Packed.Win32.Tdss [Ikarus]2
Trojan.Dropper [PC Tools]2
Trojan.Dropper [Symantec]2
TrojanSpy:Win32/Chadem.A [Microsoft]2
Backdoor.Win32.Small.irf [Kaspersky Lab]1
RogueAntiSpyware.InternetAntivirus [PC Tools]1
Troj/Agent-LXS [Sophos]1
Trojan.Win32.Pincav.mwo [Kaspersky Lab]1
Trojan.Win32.Tdss [Ikarus]1
Trojan.Win32.Tdss.avba [Kaspersky Lab]1
TrojanDownloader:Win32/FakeIA.A [Microsoft]1
TrojanSpy:Win32/Bebloh.A [Microsoft]1
Virus.Packed.Win32.Tdss [Ikarus]1
Win-Trojan/Downloader.28672.SC [AhnLab]1

DNSChanger.p [McAfee] has the following possible country of origin:
OriginNumber of Incidents
Russian Federation15

DNSChanger.p [McAfee] is known to be created as:
%ProgramFiles%\antimalware\antimalware.exe
%ProgramFiles%\antimalware\uninstall.exe
%ProgramFiles%\malware defense\mdefense.exe
%System%\rdkewti.exe
%Temp%\0_11adwara.exe
%Temp%\clspackxq.exe
%Temp%\mdefense.exe
%Temp%\richtx64.exe
%Temp%\wscsvc32.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).