Threat Search: 

ThreatExpert's Statistics for Generic Downloader.s [McAfee]:

Generic Downloader.s [McAfee] is also known as:
Threat AliasNumber of Incidents
Downloader [Symantec]541
Trojan-Downloader.VB.AWJ [PC Tools]394
Backdoor.Trojan [Symantec]169
Trojan-Downloader.Win32.VB [Ikarus]75
Mal/VBDldr-D [Sophos]62
TROJ_VB.HFS [Trend Micro]60
Trojan.Win32.VB.bdo [Kaspersky Lab]59
Troj/Bckdr-QPB [Sophos]44
Trojan-Downloader.Win32.VB.hvw [Kaspersky Lab]44
Trojan.VB.GCC [PC Tools]41
TROJ_DLOADER.SZF [Trend Micro]39
Backdoor.Win32.VB.brg [Kaspersky Lab]35
Backdoor:Win32/VB.AT [Microsoft]34
W32.IRCBot [Symantec]34
Trojan Horse [Symantec]24
Trojan.Win32.VB.bdb [Kaspersky Lab]23
Trojan-Downloader.Win32.VB.bbn [Kaspersky Lab]22
Mal/Generic-A [Sophos]21
Constructor.Win32.Binder.kh [Ikarus]20
Trojan.DL.VB.AAQL [PC Tools]20
Trojan-Downloader.Win32.VB.bgd [Kaspersky Lab]20
Trojan-Downloader.Win32.VB.awj [Kaspersky Lab]18
Win-Trojan/Xema.variant [AhnLab]18
Backdoor:Win32/VB.ANS [Microsoft]17
TROJ_VB.CHS [Trend Micro]17
TROJ_DLOADER.PCR [Trend Micro]16
TROJ_DLOADER.PRQ [Trend Micro]16
TROJ_VB.CYV [Trend Micro]16
W32.SillyFDC [Symantec]15
Trojan.Tagasaurus [PC Tools]13
Backdoor.Win32.VB [Ikarus]11
Trojan.DL.VB.ACWT.Gen [PC Tools]11
TrojanDownloader:Win32/VB [Microsoft]11
Trojan-Downloader.Win32.VB.itq [Kaspersky Lab]10
TROJ_DLOADER.BDP [Trend Micro]9
TROJ_POPPER.D [Trend Micro]9
Trojan-Downloader.Win32.Agent.bl [Kaspersky Lab]9
Trojan-Downloader.Win32.VB.gwr [Kaspersky Lab]9
Backdoor.VB.brg [PC Tools]8
Email-Worm.Win32.Alcaul [Ikarus]8
TROJ_MALOE5.A [Trend Micro]7
TROJ_VB.FDC [Trend Micro]7
Trojan.Win32.Buzus.aedz [Kaspersky Lab]7
Trojan-Downloader.VB!sd5 [PC Tools]7
Backdoor.Win32.Small.cvt [Kaspersky Lab]6
Backdoor:Win32/VB.C [Microsoft]6
Troj/Zlob-ANZ [Sophos]6
TROJ_AGENT.AKKT [Trend Micro]6
Trojan.Win32.VB.tg [Kaspersky Lab]6
Trojan-Downloader.Win32.VB.hzp [Kaspersky Lab]6
Trojan-Spy.40960 [Ikarus]6
Worm.Win32.VB.ck [Kaspersky Lab]6
Downloader.Trojan [Symantec]5
TROJ_VB.FJP [Trend Micro]5
Trojan-Downloader.Win32.VB.ang [Kaspersky Lab]5
Trojan-Downloader.Win32.VB.bto [Kaspersky Lab]5
Trojan-Downloader.Win32.VB.hzp [Ikarus]5
TrojanDownloader:Win32/Tearspear [Microsoft]5
TROJ_DLOADER.EKZ [Trend Micro]4
TROJ_DLOADER.MWN [Trend Micro]4
TROJ_VB.EZW [Trend Micro]4
TROJ_VB.FKB [Trend Micro]4
Trojan.VB.AAOM [PC Tools]4
Trojan.Win32.Buzus.aeea [Kaspersky Lab]4
Trojan.Win32.Buzus.aels [Kaspersky Lab]4
Trojan-Clicker.VB!sd5 [PC Tools]4
Trojan-Downloader.Win32.Adload.j [Kaspersky Lab]4
Trojan-Downloader.Win32.VB.bbt [Kaspersky Lab]4
Trojan-Downloader.Win32.VB.bnq [Kaspersky Lab]4
Trojan-Downloader.Win32.VB.KE [Ikarus]4
Trojan-Downloader.Win32.VB.kyx [Kaspersky Lab]4
TrojanDownloader:Win32/VB.AAF [Microsoft]4
Backdoor.Small!ct [PC Tools]3
Backdoor.Small.AKYH [PC Tools]3
BKDR_SMALL.BWM [Trend Micro]3
TROJ_VB.NX [Trend Micro]3
Trojan.Adclicker [Symantec]3
Trojan.Popper [Symantec]3
Trojan.VB.DXAU [PC Tools]3
Trojan-Clicker.Win32.VB.lf [Kaspersky Lab]3
Trojan-Downloader.Win32.Small [Ikarus]3
Trojan-Downloader.Win32.VB.caw [Kaspersky Lab]3
Trojan-Downloader.Win32.VB.tw [Kaspersky Lab]3
Win-Trojan/Downloader.28672.IQ [AhnLab]3
Adware.WinBo [Symantec]2
Infostealer [Symantec]2
TROJ_DLOADER.DAM [Trend Micro]2
TROJ_DLOADER.DZQ [Trend Micro]2
TROJ_DLOADER.IA [Trend Micro]2
TROJ_VB.EMG [Trend Micro]2
TROJ_VB.EMI [Trend Micro]2
TROJ_VB.HCQ [Trend Micro]2
Trojan.DL.Agent.ESBP [PC Tools]2
Trojan.DL.VB.AAON [PC Tools]2
Trojan-Downloader.Win32.VB.anl [Kaspersky Lab]2
Trojan-Downloader.Win32.VB.apu [Kaspersky Lab]2
Trojan-Downloader.Win32.VB.azs [Kaspersky Lab]2
Trojan-Downloader.Win32.VB.bqc [Kaspersky Lab]2
Trojan-Downloader.Win32.VB.fen [Kaspersky Lab]2
Trojan-Downloader.Win32.VB.fn [Kaspersky Lab]2

Generic Downloader.s [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
China75
Republic of Korea5
Spain2
Taiwan2
Brazil1
Germany1
Ukraine1

Generic Downloader.s [McAfee] is known to be created as:
%AppData%\setup.exe
%CommonPrograms%\startup\msconfig.exe
%ProgramFiles%\updates\2e50a735.exe
%ProgramFiles%\updates\40dfc044.exe
%ProgramFiles%\updates\e1c44b5b.exe
%System%\ani02\ani022328.exe
%System%\ani15\ani151080.exe
%System%\aqvreo01\aqvreo011065.exe
%System%\aqvreo04\aqvreo041066.exe
%System%\aqvreo05\aqvreo051080.exe
%System%\aqvreo16\aqvreo162291.exe
%System%\aqvreo18\aqvreo182328.exe
%System%\ardco01\ardco011065.exe
%System%\ardco02\ardco021099.exe
%System%\ardco03\ardco031064.exe
%System%\ardco09\ardco092063.exe
%System%\ardco16\ardco162291.exe
%System%\ardco17\ardco172314.exe
%System%\ardco18\ardco182328.exe
%System%\aumsdk01\aumsdk011065.exe
%System%\aumsdk05\aumsdk051080.exe
%System%\aumsdk06\aumsdk061083.exe
%System%\aumsdk18\aumsdk182328.exe
%System%\b02fdue\b02fdue1065.exe
%System%\b08fdue\b08fdue1086.exe
%System%\b8ttui.exe
%System%\bharebio01\bharebio011065.exe
%System%\bharebio05\bharebio051080.exe
%System%\bharebio16\bharebio162291.exe
%System%\bharebio18\bharebio182328.exe
%System%\bkeur01\bkeur011065.exe
%System%\bkeur04\bkeur041066.exe
%System%\bkeur05\bkeur051080.exe
%System%\bkeur18\bkeur182328.exe
%System%\carh01\carh011065.exe
%System%\carh04\carh041066.exe
%System%\carh05\carh051080.exe
%System%\carh06\carh061083.exe
%System%\carh18\carh182328.exe
%System%\dasgo02\dasgo021099.exe
%System%\dasgo05\dasgo051080.exe
%System%\dasgo06\dasgo061083.exe
%System%\dasgo07\dasgo071084.exe
%System%\dasgo13\dasgo132218.exe
%System%\dasgo16\dasgo162291.exe
%System%\dasgo17\dasgo172314.exe
%System%\dasgo18\dasgo182328.exe
%System%\dfrnx01\dfrnx011065.exe
%System%\dfrnx03\dfrnx031064.exe
%System%\dfrnx05\dfrnx051080.exe
%System%\dfrnx06\dfrnx061083.exe
%System%\dfrnx18\dfrnx182328.exe
%System%\dpi19\dpi191065.exe
%System%\drivers\setup\downloader\downloader.exe
%System%\drivers\setup\manager.exe
%System%\edca01\edca011065.exe
%System%\edca16\edca162291.exe
%System%\edca17\edca172314.exe
%System%\edca18\edca182328.exe
%System%\emaxt19\emaxt191065.exe
%System%\ev02\ev022328.exe
%System%\ev13\ev131084.exe
%System%\ev19\ev191065.exe
%System%\f01wtr\f01wtr1064.exe
%System%\f02wtr\f02wtr1065.exe
%System%\f03wtr\f03wtr1066.exe
%System%\f10wtr\f10wtr1099.exe
%System%\f23wtr\f23wtr2157.exe
%System%\ghu02\ghu022328.exe
%System%\ghu13\ghu131084.exe
%System%\helpme.exe
%System%\hgc.exe
%System%\idlo01\idlo011065.exe
%System%\idlo03\idlo031064.exe
%System%\idlo04\idlo041066.exe
%System%\idlo16\idlo162291.exe
%System%\idlo18\idlo182328.exe
%System%\inewc01\inewc011065.exe
%System%\inewc02\inewc021099.exe
%System%\inewc03\inewc031064.exe
%System%\inewc06\inewc061083.exe
%System%\inewc07\inewc071084.exe
%System%\inewc12\inewc122215.exe
%System%\inewc13\inewc132218.exe
%System%\iyesb7.exe
%System%\kbin02\kbin022328.exe
%System%\kbin15\kbin151080.exe
%System%\kbin19\kbin191065.exe
%System%\logxv01\logxv011065.exe
%System%\logxv05\logxv051080.exe
%System%\logxv06\logxv061083.exe
%System%\m3v02\m3v022328.exe
%System%\mc02\mc022328.exe
%System%\mc17\mc171064.exe
%System%\mc19\mc191065.exe
%System%\modtrux01\modtrux011065.exe
%System%\modtrux03\modtrux031064.exe
%System%\modtrux05\modtrux051080.exe
%System%\modtrux18\modtrux182328.exe
%System%\ms0341600134.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).