Threat Search: 

ThreatExpert's Statistics for Downloader-BCF [McAfee]:

Downloader-BCF [McAfee] is also known as:
Threat AliasNumber of Incidents
New Malware.bx [McAfee]287
Downloader [Symantec]252
TROJ_UPOLYX.BL [Trend Micro]198
Trojan-Downloader.Homles!sd6 [PC Tools]196
Adware.Maxifiles [PC Tools]76
Infostealer.Gampass [Symantec]39
Trojan.DL.Small.VWY [PC Tools]38
Trojan-Downloader.Win32.Small.fox [Kaspersky Lab]36
Trojan.Vundo [Symantec]19
Trojan-Downloader.Win32.Small.eqn [Kaspersky Lab]17
TROJ_DLOADER.EGF [Trend Micro]16
TROJ_DLOADER.QOW [Trend Micro]16
Backdoor.Trojan [Symantec]15
TROJ_DLOADER.QVD [Trend Micro]12
TROJ_DLOADER.DLZ [Trend Micro]9
TROJ_DLOADER.PQE [Trend Micro]9
Trojan.DL.Small.UQG [PC Tools]9
Adware.Insider!sd5 [PC Tools]5
Mal/DownLdr-O [Sophos]5
not-a-virus:AdWare.Win32.Rond.c [Kaspersky Lab]5
Trojan.DL.Small.WDJ [PC Tools]5
Troj/DwnLdr-GWP [Sophos]4
TROJ_DLOADER.DKF [Trend Micro]4
TROJ_DLOADER.TYO [Trend Micro]4
TROJ_POPWIN.DE [Trend Micro]4
Trojan.DL.Small.UPX [PC Tools]4
Trojan-Downloader.Win32.Homles.br [Kaspersky Lab]4
Trojan-Downloader.Win32.Small.fky [Kaspersky Lab]4
Virus.Win32.Small [Ikarus]4
not-a-virus:AdWare.Win32.Agent.tj [Kaspersky Lab]3
TROJ_DLOADER.QNF [Trend Micro]3
Trojan.DL.Small.HHC [PC Tools]3
Trojan.Win32.Agent.crf [Kaspersky Lab]3
Trojan-Downloader.Agent!sd5 [PC Tools]3
Trojan-Downloader.Win32.Small [Ikarus]3
Email-Worm.Win32.Zhelatin.kb [Kaspersky Lab]2
TROJ_AGENT.AAWZ [Trend Micro]2
TROJ_DLOADER.GFE [Trend Micro]2
TROJ_DROPPER.DCI [Trend Micro]2
TROJ_MATCASH.AM [Trend Micro]2
TROJ_SMALL.CTV [Trend Micro]2
Trojan Horse [Symantec]2
Trojan.DL.Agent.ESRR [PC Tools]2
Trojan.DL.Small.VFO [PC Tools]2
Trojan.Dropper [Symantec]2
Trojan-Downloader.Win32.Agent.fjn [Kaspersky Lab]2
Trojan-Downloader.Win32.Agent.idv [Kaspersky Lab]2
Backdoor.Win32.Agobot.amp [Kaspersky Lab]1
Mal/Generic-A [Sophos]1
not-a-virus:AdWare.Win32.Insider.c [Ikarus]1
not-a-virus:AdWare.Win32.Rond.b [Kaspersky Lab]1
TROJ_ADLOAD.UW [Trend Micro]1
TROJ_AGENT.DPX [Trend Micro]1
TROJ_AGENT.HHE [Trend Micro]1
TROJ_AGENT.VBK [Trend Micro]1
TROJ_AGENT.XQW [Trend Micro]1
TROJ_AGOBOT.EA [Trend Micro]1
TROJ_DLOADER.BQD [Trend Micro]1
TROJ_DLOADER.FGZ [Trend Micro]1
TROJ_DLOADER.GZU [Trend Micro]1
TROJ_DLOADER.GZY [Trend Micro]1
TROJ_DLOADER.HBK [Trend Micro]1
TROJ_DLOADER.KGM [Trend Micro]1
TROJ_DLOADER.PCY [Trend Micro]1
TROJ_DLOADER.PYH [Trend Micro]1
TROJ_DLOADER.QOR [Trend Micro]1
TROJ_DLOADER.TCD [Trend Micro]1
TROJ_DLOADER.VBW [Trend Micro]1
TROJ_DROPPER.AIO [Trend Micro]1
TROJ_MATCASH.AY [Trend Micro]1
TROJ_MATCASH.BV [Trend Micro]1
TROJ_POPWIN.AT [Trend Micro]1
TROJ_SMALL.EWM [Trend Micro]1
TROJ_SMALL.IOL [Trend Micro]1
TROJ_ZEROML.BF [Trend Micro]1
Trojan.Agent!sd5 [PC Tools]1
Trojan.DL.Agent.CWUZ [PC Tools]1
Trojan.DL.Agent.ECSX [PC Tools]1
Trojan.DL.Agent.IIX [PC Tools]1
Trojan.DL.Agent.KPL [PC Tools]1
Trojan.DL.Agent.MAR [PC Tools]1
Trojan.DL.Agent.MND [PC Tools]1
Trojan.DL.Agent.UJO [PC Tools]1
Trojan.DL.Small.UVW [PC Tools]1
Trojan.DR.Small.UQH [PC Tools]1
Trojan.Win32.Agent.bqn [Kaspersky Lab]1
Trojan-Downloader.Win32.Adload.jm [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.bls [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.brf [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.cbx [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.erf [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.tkz [Kaspersky Lab]1
Trojan-Downloader.Win32.Small.fwu [Kaspersky Lab]1
TrojanDownloader:Win32/Tearspear [Microsoft]1
Trojan-Dropper.Agent [Ikarus]1
Win-Trojan/Agent.95232.AM [AhnLab]1

Downloader-BCF [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
Netherlands304
Slovenia46
France39
Russian Federation2
China1
United Kingdom1

Downloader-BCF [McAfee] is known to be created as:
%CommonPrograms%\startup\1.exe
%ProgramFiles%\inetget2\popinstall.exe
%ProgramFiles%\temporary\insiderinst.exe
%ProgramFiles%\temporary\kerninstall.exe
%ProgramFiles%\temporary\wininstall.exe
%ProgramFiles%\words\words.exe
%System%\cf2\mac33p.exe
%System%\l3\wr716.exe
%System%\sas1\rw100dr2.exe
%System%\ss9\rw1000dr.exe
%System%\sz1\rw1000dr.exe
%Temp%\crack.exe
%Temp%\guqf296\we.exe
%Temp%\ixp000.tmp\wr-1-904.exe
%Temp%\rarsfx0\wr.exe
%Temp%\setup.exe
%Temp%\wr.exe
%Temp%\wr-1-444.exe
%UserProfile%\install.exe
Notes:
  • %CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).