Threat Search: 

ThreatExpert's Statistics for Generic PWS.di [McAfee]:

Generic PWS.di [McAfee] is also known as:
Threat AliasNumber of Incidents
Backdoor:Win32/Poisonivy.H [Microsoft]20
Mal/Behav-328 [Sophos]19
Trojan.Win32.Llac.bdm [Kaspersky Lab]18
Malware.Spyrat [PC Tools]17
W32.Spyrat [Symantec]17
Worm:Win32/Rebhip.A [Microsoft]16
Mal/Behav-043, Mal/Behav-328, Mal/Behav-103 [Sophos]6
Trojan-Dropper.Win32.Agent.blsd [Kaspersky Lab]6
Mal/Behav-328, Mal/Behav-103, Mal/Behav-043 [Sophos]4
Troj/Agent-MOY [Sophos]3
Mal/Behav-328, Mal/Behav-043 [Sophos]1
Mal/Behav-328, Mal/Emogen-I [Sophos]1
Mal/EncPK-LL, Mal/Behav-328 [Sophos]1
Mal/Generic-A, Mal/Behav-328 [Sophos]1
Trojan Horse [Symantec]1
Trojan.Generic [PC Tools]1
Trojan.Win32.Llac.abi [Kaspersky Lab]1
Trojan.Win32.Llac.ada [Kaspersky Lab]1
Trojan.Win32.Llac.bcx [Kaspersky Lab]1
Trojan.Win32.Llac.bju [Kaspersky Lab]1
Trojan.Win32.Llac.ga [Kaspersky Lab]1
Trojan-Dropper.Win32.Malf [Ikarus]1

Generic PWS.di [McAfee] is known to be created as:
%System%\spynet\server.exe
%Temp%\727882.exe
%Temp%\ccryp122.exe
%Temp%\ixp000.tmp\server.exe
%Temp%\svchost.exe
%Windir%\server.exe
%Windir%\server2.exe
%Windir%\system\ctfmon.exe
c:\0jpz.exe
c:\dir\install\install\server.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.