Threat Search: 

ThreatExpert's Statistics for Downloader-AZN [McAfee]:

Downloader-AZN [McAfee] is also known as:
Threat AliasNumber of Incidents
Mal/Delf-M, Mal/Behav-236 [Sophos]102
Virus.Win32.Delf.HNJ [Ikarus]93
Downloader [Symantec]46
TrojanSpy:Win32/Hitpop.gen!C [Microsoft]45
Worm.AutoRun.GEN [PC Tools]38
TrojanSpy:Win32/Hitpop.AC [Microsoft]28
Mal/Delf-M [Sophos]27
Infostealer [Symantec]17
Mal/Pophot-A [Sophos]13
Trojan-Spy.Pophot.WX [PC Tools]10
TrojanSpy:Win32/Hitpop.AL [Microsoft]9
Trojan.Cymdos [Symantec]7
Trojan-Downloader.Win32.Agent.adtc [Kaspersky Lab]7
Trojan-Spy.Win32.Agent [Ikarus]7
Worm:Win32/Autorun.YB [Microsoft]7
Infostealer.Gampass [Symantec]6
Trojan-Spy.Win32.Pophot.hpu [Kaspersky Lab]6
Virus.Win32.Pophot [Ikarus]6
Win-Trojan/Pophot.36352.CL [AhnLab]6
Mal/Behav-156, Mal/Delf-M, Mal/Behav-236 [Sophos]5
Trojan Horse [Symantec]5
Trojan-Spy.Win32.Pophot.gjd [Kaspersky Lab]5
Trojan.Hitpop.J [Ikarus]4
Worm.Win32.AutoRun.tyv [Kaspersky Lab]4
Trojan.Win32.KillAV.atl [Kaspersky Lab]3
Worm.AutoRun.ody [PC Tools]3
Worm.Win32.AutoRun.mbj [Kaspersky Lab]3
Worm.Win32.AutoRun.snf [Kaspersky Lab]3
Mal/Emogen-P [Sophos]2
Trojan-GameThief.Win32.Lmir [Ikarus]2
Trojan-Spy.Win32.Pophot [Ikarus]2
TrojanSpy:Win32/Hitpop.gen!B [Microsoft]2
TrojanSpy:Win32/Pophot.K!dll [Microsoft]2
Win-Trojan/Xema.variant [AhnLab]2
Worm.AutoRun!sd6 [PC Tools]2
Worm.Win32.AutoRun.nes [Kaspersky Lab]2
Worm.Win32.AutoRun.qvc [Kaspersky Lab]2
Worm.Win32.AutoRun.reo [Kaspersky Lab]2
Worm.Win32.AutoRun.rux [Kaspersky Lab]2
Worm.Win32.AutoRun.sqk [Kaspersky Lab]2
Infostealer.Onlinegame [Symantec]1
Mal/Generic-A, Mal/Pophot-A [Sophos]1
Mal/Pophot-B [Sophos]1
TROJ_Generic.A [Trend Micro]1
Trojan.KillAV!sd6 [PC Tools]1
Trojan-Downloader.Win32.Agent.adfr [Kaspersky Lab]1
Trojan-Downloader.Win32.Delf.bcm [Kaspersky Lab]1
Trojan-Downloader.Win32.Delf.dgk [Kaspersky Lab]1
Trojan-Spy.Pophot.ASO [PC Tools]1
Trojan-Spy.Pophot.GEN [PC Tools]1
TrojanSpy.Pophot.GJF [PC Tools]1
Trojan-Spy.Win32.Pophot.abs [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.aje [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.asq [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.bed [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cui [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cwd [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cxw [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.ger [Kaspersky Lab]1
TrojanSpy:Win32/Hitpop.Z [Microsoft]1
Win32/Autorun.worm.62464 [AhnLab]1
Worm.Win32.AutoRun.aack [Kaspersky Lab]1
Worm.Win32.AutoRun.aaiy [Kaspersky Lab]1
Worm.Win32.AutoRun.aavg [Kaspersky Lab]1
Worm.Win32.AutoRun.abcu [Kaspersky Lab]1
Worm.Win32.AutoRun.aciw [Kaspersky Lab]1
Worm.Win32.AutoRun.adge [Kaspersky Lab]1
Worm.Win32.AutoRun.aedb [Kaspersky Lab]1
Worm.Win32.AutoRun.afqh [Kaspersky Lab]1
Worm.Win32.AutoRun.egb [Kaspersky Lab]1
Worm.Win32.AutoRun.lzg [Kaspersky Lab]1
Worm.Win32.AutoRun.nua [Kaspersky Lab]1
Worm.Win32.AutoRun.pgh [Kaspersky Lab]1
Worm.Win32.AutoRun.qqx [Kaspersky Lab]1
Worm.Win32.AutoRun.qyr [Kaspersky Lab]1
Worm.Win32.AutoRun.rbp [Kaspersky Lab]1
Worm.Win32.AutoRun.rci [Kaspersky Lab]1
Worm.Win32.AutoRun.rlp [Kaspersky Lab]1
Worm.Win32.AutoRun.rnb [Kaspersky Lab]1
Worm.Win32.AutoRun.ruh [Kaspersky Lab]1
Worm.Win32.AutoRun.srn [Kaspersky Lab]1
Worm.Win32.AutoRun.tik [Kaspersky Lab]1
Worm.Win32.AutoRun.uca [Kaspersky Lab]1
Worm.Win32.AutoRun.vgm [Kaspersky Lab]1
Worm.Win32.AutoRun.vst [Kaspersky Lab]1
Worm.Win32.AutoRun.wzi [Kaspersky Lab]1
Worm.Win32.AutoRun.xmb [Kaspersky Lab]1
Worm.Win32.AutoRun.zwx [Kaspersky Lab]1

Downloader-AZN [McAfee] has the following possible country of origin:
OriginNumber of Incidents
China1

Downloader-AZN [McAfee] is known to be created as:
%System%\inf\scsys16_081006.dll
%System%\inf\scsys16_081015.dll
%System%\inf\scsys16_081016.dll
%System%\inf\scsys16_081027.dll
%System%\inf\scsys16_090615.dll
%System%\wincheck070907.dll
%System%\wincheck071204.dll
%System%\wincheck071213.dll
%System%\zsmscheck080415.dll
%Windir%\dcbdcatys32_081210a.dll
%Windir%\dcbdcatys32_081212a.dll
%Windir%\system\dljj32a.dll
%Windir%\system\jjxzajcj32dl.dll
%Windir%\system\jjxzbjcj32dl.dll
%Windir%\system\jjxzjcj32dla.dll
%Windir%\system\llsjy32.dll
%Windir%\system\mvjaj32dla.dll
%Windir%\system\mvjbj32dla.dll
%Windir%\system\mvjcj32dla.dll
%Windir%\system\mvjj32dla.dll
%Windir%\system\mzjj32dla.dll
%Windir%\system\zhqbdf080125.dll
%Windir%\system\zhqbdf080126.dll
%Windir%\system\zhqbdf080202.dll
%Windir%\system\zhqbdf080223.dll
%Windir%\system\zhqbdf080227.dll
%Windir%\system\zhqbdf080321.dll
%Windir%\system\zhqbdf080404.dll
%Windir%\system\zhqbdf080419.dll
%Windir%\system\zhqbdf080427.dll
%Windir%\wftadfi16_081006a.dll
%Windir%\wftadfi16_081015a.dll
%Windir%\wftadfi16_081016a.dll
%Windir%\wftadfi16_081027a.dll
%Windir%\wftadfi16_090615a.dll
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.