Threat Search: 

ThreatExpert's Statistics for Downloader [Symantec]:

Downloader [Symantec] is also known as:
Threat AliasNumber of Incidents
New Malware.bx [McAfee]40,769
TROJ_UPOLYX.BL [Trend Micro]38,808
Trojan-Downloader.Homles!sd6 [PC Tools]38,416
W32/HLLP.Philis.dll [McAfee]18,496
Worm.Win32.Viking.ix [Kaspersky Lab]17,200
Trojan.Viking.Gen!Pac.4 [PC Tools]16,137
TROJ_LOOKED.LU [Trend Micro]9,603
Generic Downloader.g [McAfee]9,422
TROJ_TIBS.ZV [Trend Micro]9,408
Trojan-Downloader.Tibs!sd5 [PC Tools]9,408
Mal_Xed-4 [Trend Micro]6,671
Mal/Generic-A [Sophos]5,917
Generic Downloader.x [McAfee]5,563
Adware.Maxifiles [PC Tools]5,522
TROJ_SMALL.KBU [Trend Micro]4,624
Generic.f [McAfee]4,422
Trojan-Downloader.Small.AFI [PC Tools]4,420
Downloader-BEC [McAfee]4,409
Trojan-Downloader.Small.BUY [PC Tools]4,158
not-a-virus:AdWare.Win32.TTC.a [Kaspersky Lab]3,911
Bloodhound.NsAnti [Symantec]3,472
TROJ_DLOADER.SCW [Trend Micro]3,248
W32/Looked-DX [Sophos]3,069
Virus:Win32/Viking.gen.dll!A [Microsoft]2,893
Trojan.Packed.NsAnti [Symantec]2,877
Downloader.gen.a [McAfee]2,723
Trojan-Dropper.Agent [Ikarus]2,675
Trojan-Downloader.Agent!sd6 [PC Tools]2,536
Trojan.Matcash.Gen.2 [PC Tools]2,515
TROJ_DLOADER.QNF [Trend Micro]2,200
Trojan-Downloader.Win32.Small [Ikarus]2,084
Downloader.Generic [PC Tools]2,044
TROJ_DROPPER.UW [Trend Micro]2,009
TrojanDownloader:Win32/Renos.DU [Microsoft]1,592
Generic.dx [McAfee]1,385
TrojanDownloader:Win32/VB.AAF.remnants [Microsoft]1,326
Worm.Viking!sd5 [PC Tools]1,301
Trojan-Downloader.Win32.Tibs.ww [Kaspersky Lab]1,248
Trojan-Downloader.Small!sd6 [PC Tools]1,246
Win-Trojan/Xema.variant [AhnLab]1,116
Possible_Virus [Trend Micro]1,093
Trojan-Downloader.VB.VPG [Ikarus]1,088
Generic Downloader.ab [McAfee]1,076
BackDoor-DNP.dll [McAfee]1,027
TROJ_DLOADER.DYA [Trend Micro]997
Worm.Win32.Viking.ex [Ikarus]990
Trojan-Downloader.Small!sd5 [PC Tools]887
Trojan-GameThief.Win32.OnLineGames.trxn [Kaspersky Lab]812
TROJ_DLOADER.ZIM [Trend Micro]798
Trojan-Downloader.Win32.Homles.br [Kaspersky Lab]786
Trojan.Popuper [PC Tools]766
Troj/LogThief-A [Sophos]756
Trojan-Downloader.Win32.Small.agbh [Kaspersky Lab]756
Trojan-Dropper [Ikarus]726
Trojan.Zlob [Ikarus]699
Trojan.BHO!sd6 [PC Tools]682
Troj/Renos-BS [Sophos]679
Trojan-Downloader.Win32.Agent.arpa [Kaspersky Lab]679
TROJ_SMALL.KGX [Trend Micro]650
Trojan.Win32.BHO [Ikarus]649
TROJ_LOOKED.MO [Trend Micro]648
Worm.Viking [PC Tools]625
Trojan-Downloader.Small.GEN [PC Tools]613
Trojan-Downloader.Win32.Small.jis [Kaspersky Lab]588
Win-Trojan/Downloader.9728.KT [AhnLab]579
Trojan-Downloader.Win32.Agent.dvd [Kaspersky Lab]572
Adware.TTC!sd5 [PC Tools]562
Trojan-Downloader.Win32.Agent.bexw [Kaspersky Lab]560
TROJ_LOOKED.AI [Trend Micro]550
Generic Downloader.s [McAfee]541
Trojan-GameThief.Win32.Nilage [Ikarus]534
Trojan-Downloader.Small [Ikarus]531
Worm.Win32.Viking.n [Kaspersky Lab]525
Worm.Win32.AutoRun [Ikarus]501
Worm.Win32.Viking.ba [Kaspersky Lab]494
Trojan-Downloader.Win32.Agent.bhyn [Kaspersky Lab]488
Win-Trojan/Downloader.7680.MI [AhnLab]485
Troj/BHO-IA [Sophos]484
Generic Downloader.z [McAfee]481
Trojan.Win32.BHO.iaw [Kaspersky Lab]462
Mal/TinyDL-T [Sophos]435
TROJ_DLOADER.CSZ [Trend Micro]434
TrojanDownloader:Win32/Troxen!rts [Microsoft]421
Trojan-Downloader.Win32.Renos.DU [Ikarus]415
Trojan.DL.Agent.VRX [PC Tools]414
W32/Autorun.worm.gen [McAfee]408
W32/Winko.worm.dll [McAfee]398
Trojan.Matcash.Gen [PC Tools]393
Mal/Inet-Fam [Sophos]385
TROJ_LOOKED.GX [Trend Micro]380
Generic Packed [McAfee]376
Trojan-Downloader.VB.AWJ [PC Tools]369
PWS-Bluedit [McAfee]368
Troj/Dloadr-BMT [Sophos]361
Trojan.DL.Ftpgzips.A.Gen [PC Tools]361
Trojan-Downloader.Win32.Small.agct [Kaspersky Lab]361
Win-Trojan/Yanshi.3072 [AhnLab]360
Trojan:Win32/Rlsloup.B [Microsoft]351
Worm.Win32.AutoRun.nvc [Kaspersky Lab]340
not-a-virus:AdWare.Win32.BHO.dwl [Kaspersky Lab]320

Downloader [Symantec] has the following possible countries of origin:
OriginNumber of Incidents
Netherlands46,380
Slovenia6,241
China3,837
Brazil1,325
Russian Federation1,143
Ukraine674
Republic of Korea423
Slovakia138
Canada75
Spain74
Germany64
France56
Israel52
Taiwan51
United Kingdom46
Sweden30
Italy27
New Zealand14
Austria7
Iran7
Turkey7
Australia6
Belgium5
Poland5
Saudi Arabia5
Bulgaria4
Japan4
Portugal4
Argentina3
Czech Republic3
Greece3
Ireland3
Thailand3
Uzbekistan3
Croatia2
Finland2
United Arab Emirates2
Colombia1
Hungary1
Jordan1
Latvia1
Mexico1
Nicaragua1
Romania1
Serbia and Montenegro1

Downloader [Symantec] is known to be created as:
%AllUsersProfile%\fhyakl\0891.exe
%AllUsersProfile%\fhyakl\win20.exe
%AllUsersProfile%\fhyakl\win21.exe
%AllUsersProfile%\services.exe
%AppData%\008b1033.exe
%AppData%\5.exe
%AppData%\58aeb013.exe
%AppData%\79fb.exe
%AppData%\adobe\manager.exe
%AppData%\adobe\player.exe
%AppData%\aptqjs.exe
%AppData%\bbglutla.exe
%AppData%\bggexu.exe
%AppData%\bifrost\server.exe
%AppData%\bvhsw.exe
%AppData%\bzdijt.exe
%AppData%\cftmon.exe
%AppData%\cogad\cogad.exe
%AppData%\comrepl.exe
%AppData%\df.exe
%AppData%\dwbrk02.exe
%AppData%\dweqsfer.exe
%AppData%\ecjuungy.exe
%AppData%\eqbmamlnpsq.exe
%AppData%\f508.exe
%AppData%\facegame\facegame.exe
%AppData%\gadcom\gadcom.exe
%AppData%\gedumrcok.exe
%AppData%\gknfqt.exe
%AppData%\google\update\googleupdatebeta.exe
%AppData%\igouf.exe
%AppData%\install folder\sql2005.dll
%AppData%\iwmclzi.exe
%AppData%\jcikmws.exe
%AppData%\jda.exe
%AppData%\kchsborixd.exe
%AppData%\key folder\filensys.exe
%AppData%\key folder\sql2005.dll
%AppData%\lsass.exe
%AppData%\lupngzu.exe
%AppData%\microsoft\auxv.exe
%AppData%\microsoft\dtsc\17836.exe
%AppData%\microsoft\dtsc\19468.exe
%AppData%\microsoft\dtsc\25394.exe
%AppData%\microsoft\hscg.exe
%AppData%\microsoft\windows\winlogon.exe
%AppData%\microsoft\wscp.exe
%AppData%\mjkpj.exe
%AppData%\nscagent.exe
%AppData%\nsvcappflt.exe
%AppData%\ntkh.exe
%AppData%\ntwvg.exe
%AppData%\ojycdxm.exe
%AppData%\paatbcrajzte.exe
%AppData%\pridl\pridl.exe
%AppData%\ptssvc.exe
%AppData%\rayayzpy.exe
%AppData%\rdyhriypza.exe
%AppData%\real\ntoscore.exe
%AppData%\rjsblsnx.exe
%AppData%\scfocbikzdj.exe
%AppData%\seres.exe
%AppData%\service.exe
%AppData%\sfjlcb.exe
%AppData%\shmqi.exe
%AppData%\spool.exe
%AppData%\svcst.exe
%AppData%\sysrc32.exe
%AppData%\syssl.exe
%AppData%\systemw.exe
%AppData%\tth.exe
%AppData%\ustnrrxagkk.exe
%AppData%\vdmlz.exe
%AppData%\vmqoft.exe
%AppData%\windowsupdate.exe
%AppData%\winhlp64.exe
%AppData%\xpsp2pach.exe.exe
%AppData%\xrvymitprrp.exe
%AppData%\xszbe.exe
%AppData%\ykg.exe
%AppData%\yrm.exe
%AppData%\ytccs.exe
%AppData%\zgq.exe
%AppData%\zpqsqymh.exe
%CommonAppData%\chuzgfqd\krunqnaf.exe
%CommonAppData%\microsoft\iehelper\system.exe
%CommonAppData%\microsoft\keyboard\kbdsys.exe
%CommonAppData%\nvview.exe
%CommonAppData%\polarisys\dirlock.exe
%CommonAppData%\svhost.exe
%CommonAppData%\vejurkto.dll
%CommonAppData%\webext\winchk.exe
%CommonAppData%\winmgmt.exe
%CommonDesktopDir%\classified.exe
%CommonDocuments%\classified.exe
%CommonDocuments%\settings\partnership.dll
%CommonPrograms%\startup\bios.exe
%CommonPrograms%\startup\bsyys.scr
%CommonPrograms%\startup\classified.exe
%CommonPrograms%\startup\ctfmen.exe
Notes:
  • %AllUsersProfile% is a variable that specifies the all users' profile folder. By default, this is C:\Documents and Settings\All Users (Windows NT/2000/XP).
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %CommonDesktopDir% is a variable that refers to the file system directory that contains files and folders that appear on the desktop for all users. A typical path is C:\Documents and Settings\All Users\Desktop (Windows NT/2000/XP).
  • %CommonDocuments% is a variable that refers to the file system directory that contains documents that are common to all users. A typical paths is C:\Documents and Settings\All Users\Documents.
  • %CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).