Threat Search: 

ThreatExpert's Statistics for Mal/Behav-222 [Sophos]:

Mal/Behav-222 [Sophos] is also known as:
Threat AliasNumber of Incidents
Virus.Win32.Dogrobot [Ikarus]12
Trojan Horse [Symantec]3
Trojan:Win32/Dogrobot.gen!L [Microsoft]3
Backdoor.Trojan [Symantec]2
Infostealer.Gampass [Symantec]2
Win-Trojan/Agent.36784.B [AhnLab]2
Backdoor.Win32.Delf.abi [Kaspersky Lab]1
BackDoor-EFJ [McAfee]1
Generic PWS.fe [McAfee]1
Generic.dx [McAfee]1
Generic.dx!ffx [McAfee]1
PWS:Win32/Zuten.gen!C [Microsoft]1
Suspicious.MH690 [Symantec]1
Trojan.Win32.Agent.kih [Kaspersky Lab]1
Trojan.Win32.Antavmu.equ [Kaspersky Lab]1
Trojan.Win32.Antavmu.ffv [Kaspersky Lab]1
Trojan.Win32.Inject.mio [Kaspersky Lab]1
Trojan.Win32.Vilsel.hfh [Kaspersky Lab]1
Trojan:Win32/AgentBypass.gen!G [Microsoft]1
TrojanDropper:Win32/Agent.UM [Microsoft]1
Trojan-PSW.Gampass [PC Tools]1
Virus.Win32.Crypt.BIV [Ikarus]1
Virus.Win32.Poison.FU [Ikarus]1
Win-Trojan/Dogrobot.50176 [AhnLab]1

Mal/Behav-222 [Sophos] has the following possible country of origin:
OriginNumber of Incidents
China1

Mal/Behav-222 [Sophos] is known to be created as:
%ProgramFiles%\common files\system\q14.exe
%ProgramFiles%\common files\system\q22.exe
%System%\keepsafe.exe
%System%\winapint32.exe
%Windir%\lsass.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.