Threat Search: 

ThreatExpert's Statistics for Generic PWS.y!dh [McAfee]:

Generic PWS.y!dh [McAfee] is also known as:
Threat AliasNumber of Incidents
Troj/Lineag-DF [Sophos]5
Infostealer.Gampass [Symantec]4
PWS.Win32 [Ikarus]4
PWS:Win32/Wowsteal.AO!dll [Microsoft]4
Trojan.Win32.Agent2.cgbj [Kaspersky Lab]4
Win-Trojan/Agent2.24576.V [AhnLab]4
Mal/Generic-A [Sophos]2
PWS:Win32/Zbot.gen!R [Microsoft]2
Adware.Purityscan [Symantec]1
Infostealer [Symantec]1
Infostealer.Banker.C [Symantec]1
Mal/Behav-024 [Sophos]1
Mal/Behav-112 [Sophos]1
Mal/Krap-B, Mal/BredoPk-B, Mal/Behav-321 [Sophos]1
Mal/Zbot-O [Sophos]1
Packed.Generic.232 [Symantec]1
PWS:Win32/Wowsteal.AP [Microsoft]1
PWS:Win32/Yessim [Microsoft]1
Trojan.Crypt [Ikarus]1
Trojan.Win32.Agent2 [Ikarus]1
Trojan.Win32.Agent2.cgbd [Kaspersky Lab]1
Trojan-Downloader.Win32.Murlo.biw [Kaspersky Lab]1
Trojan-Dropper.Win32.Zbot [Ikarus]1
Trojan-Dropper.Win32.Zbot.i [Kaspersky Lab]1
Trojan-GameThief.Win32.WOW [Ikarus]1
Trojan-GameThief.Win32.WOW.qjz [Kaspersky Lab]1
Trojan-PSW.Banker [PC Tools]1
Trojan-Spy.Win32.Agent [Ikarus]1
Trojan-Spy.Win32.Amber [Ikarus]1
Trojan-Spy.Win32.Amber.bt [Kaspersky Lab]1
Trojan-Spy.Win32.Small.cdn [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.wmz [Kaspersky Lab]1
TrojanSpy:Win32/Agent.CG [Microsoft]1
Win32/IRCBot.worm.variant [AhnLab]1
Win-Trojan/Murlo.502272.N [AhnLab]1
Win-Trojan/OnlineGameHack.24576.RE [AhnLab]1

Generic PWS.y!dh [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
Brazil1
China1
Russian Federation1

Generic PWS.y!dh [McAfee] is known to be created as:
%ProgramFiles%\manson\liser.dll
%System%\cltmon.exe
%System%\pcmfd3.dll
%Temp%\messenger\setup.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).