Threat Search: 

ThreatExpert's Statistics for Infostealer.Snifula.B [Symantec]:

Infostealer.Snifula.B [Symantec] is also known as:
Threat AliasNumber of Incidents
Trojan-PSW.Win32.Small.bs [Kaspersky Lab]34
Rootkit.Agent.EX [PC Tools]19
Generic RootKit.a [McAfee]18
TROJ_SMALL.EME [Trend Micro]17
Mal/EncPk-HJ [Sophos]7
Trojan.Crypt [Ikarus]5
Trojan:Win32/Meredrop [Microsoft]3
Trojan-Spy.Snifula!sd6 [PC Tools]3
Generic PWS.o [McAfee]2
New Poly Win32 [McAfee]2
Trojan-PSW.Snifula [PC Tools]2
Trojan-PWS.Win32.Papras [Ikarus]2
Backdoor.Win32.Agent.aevx [Kaspersky Lab]1
Generic Dropper [McAfee]1
Generic Dropper.ad [McAfee]1
Generic Dropper.av [McAfee]1
Generic PWS.y [McAfee]1
Generic PWS.y!bck [McAfee]1
Mal/EncPk-LW [Sophos]1
Mal/FakeAV-AX [Sophos]1
RTKT_SMALL.DQB [Trend Micro]1
Spy-Agent.bg [McAfee]1
Troj/Dropr-AP [Sophos]1
Troj/Mdrop-BZQ [Sophos]1
Troj/NtRootK-AO [Sophos]1
Troj/Rootkit-FB [Sophos]1
TROJ_BUZUS.AZ [Trend Micro]1
Trojan.Win32.Vilsel.lqz [Kaspersky Lab]1
Trojan:Win32/Goldun [Microsoft]1
Trojan-Downloader.Tiny.AB [PC Tools]1
Trojan-Downloader.Win32.Agent.cwly [Kaspersky Lab]1
Trojan-Downloader.Win32.FakeVimes [Ikarus]1
Trojan-Downloader.Win32.Injecter [Ikarus]1
Trojan-Downloader.Win32.Injecter.bfr [Kaspersky Lab]1
Trojan-Dropper.Agent [Ikarus]1
Trojan-PSW.Win32.Papras.dh [Kaspersky Lab]1
Trojan-PSW.Win32.Papras.it [Kaspersky Lab]1
Trojan-PSW.Win32.Papras.je [Kaspersky Lab]1
Trojan-PSW.Win32.Papras.ki [Kaspersky Lab]1
Trojan-PSW.Win32.Papras.o [Kaspersky Lab]1
Trojan-PWS.Papras [Ikarus]1
Trojan-PWS.Win32.Small.bs [Ikarus]1
TrojanSpy:Win32/Ursnif [Microsoft]1
TrojanSpy:Win32/Ursnif.AC [Microsoft]1
TrojanSpy:Win32/Ursnif.BN [Microsoft]1
TrojanSpy:Win32/Ursnif.gen!G [Microsoft]1
TSPY_PAPRAS.AD [Trend Micro]1
W32/Koobface.worm.gen.v [McAfee]1
Win-Trojan/Malware.59904.E [AhnLab]1
Win-Trojan/Malware.61440.J [AhnLab]1
Win-Trojan/Meredrop.35840 [AhnLab]1
Win-Trojan/Papras.35328 [AhnLab]1
Win-Trojan/Papras.61952 [AhnLab]1
Win-Trojan/Snifula.33792 [AhnLab]1
Win-Trojan/Snifula.35840 [AhnLab]1

Infostealer.Snifula.B [Symantec] is known to be created as:
%System%\tsy.dll
%Windir%\9129837.exe
%Windir%\hide_evr2.sys
%Windir%\mplasink.exe
%Windir%\new_drv.sys
%Windir%\rundll22.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.