Threat Search: 

ThreatExpert's Statistics for Mal/Dorf-F [Sophos]:

Mal/Dorf-F [Sophos] is also known as:
Threat AliasNumber of Incidents
Generic.dx [McAfee]73
Trojan.Crypt [Ikarus]39
Gen.Trojan [Ikarus]38
Trojan.Initbar [Symantec]30
Trojan-Dropper.Agent [Ikarus]30
Trojan.Win32.Agent [Ikarus]24
Trojan-Spy.Win32.Agent.acrb [Kaspersky Lab]21
Infostealer.Banker.C [Symantec]18
Trojan.Win32.Agent.btpa [Kaspersky Lab]18
Trojan-Downloader.Win32.Agent.bjzg [Kaspersky Lab]18
Virus.Win32.VunDrop [Ikarus]18
PWS:Win32/Zbot.gen!R [Microsoft]12
Adware.VirtuMonde [Symantec]11
Trojan:Win32/FakeSmav [Microsoft]11
Win-Trojan/Xema.variant [AhnLab]11
Trojan-Downloader.Win32.Agent.bphc [Kaspersky Lab]10
Win32/IRCBot.worm.variant [AhnLab]10
Downloader.MisleadApp [Symantec]9
Trojan.Initbar!sd6 [PC Tools]9
Trojan.Win32.Agent2.gqx [Kaspersky Lab]8
Tibs-Packed [McAfee]7
Trojan Horse [Symantec]7
Trojan.Fakeavalert [Symantec]7
Generic FakeAlert.a [McAfee]6
Mal/EncPk-MX, Mal/Behav-331, Mal/Dorf-F, Mal/FakeVirPk-A [Sophos]6
Packed.Win32.Tibs.cy [Kaspersky Lab]6
Trojan.FakeAV [Symantec]6
Trojan.Tibs.Gen!Pac.132 [PC Tools]6
Trojan.Win32.FakeSmav [Ikarus]6
Trojan.Win32.Pakes.nhf [Kaspersky Lab]6
Trojan:Win32/Orsam!rts [Microsoft]6
Trojan:Win32/Tibs.EU [Microsoft]6
Trojan-Downloader.Win32.Agent.bqqr [Kaspersky Lab]6
Trojan-Spy.Win32.Agent [Ikarus]6
Trojan-Spy.Win32.Agent.akvx [Kaspersky Lab]6
Trojan-Spy.Win32.Zbot.tml [Kaspersky Lab]6
Win-Trojan/Pakes.27648.G [AhnLab]6
WORM_NUCRYPT.GEN [Trend Micro]6
Generic Downloader.x [McAfee]5
Generic PWS.bk [McAfee]5
Trojan.Win32.Pakes [Ikarus]5
Trojan.Win32.Pakes.nhg [Kaspersky Lab]5
Trojan-Downloader.Win32.Agent.bkyu [Kaspersky Lab]5
Win-Appcare/Agent.27648 [AhnLab]5
Generic PWS.y [McAfee]4
Packed.Win32.Tibs [Ikarus]4
Trojan:Win32/Malagent [Microsoft]4
Trojan-PSW.Banker [PC Tools]4
Trojan-Spy.Win32.Agent.adeg [Kaspersky Lab]4
Trojan-Spy.Win32.Zbot.wap [Kaspersky Lab]4
Trojan-Spy.Win32.Zbot.yat [Kaspersky Lab]4
TrojanSpy.ZBot.Gen!Pac.4 [PC Tools]4
Win-Appcare/Agent.57856 [AhnLab]4
Trojan-Spy.Win32.Agent.bada [Kaspersky Lab]3
Cryp_Pai-5 [Trend Micro]2
Downloader-ASH.gen.b [McAfee]2
Infostealer [Symantec]2
PWS:Win32/Zbot.gen!E [Microsoft]2
PWS-Zbot.gen.c [McAfee]2
Spy-Agent.bw.gen.e [McAfee]2
Trojan.Vundo [Symantec]2
Trojan.Win32.Inject [Ikarus]2
Trojan.Win32.Inject.alyy [Kaspersky Lab]2
Trojan:Win32/Fakeinit [Microsoft]2
Trojan-PSW.Generic [PC Tools]2
Trojan-Spy.Win32.Zbot.dga [Kaspersky Lab]2
Trojan-Spy.Win32.Zbot.vyu [Kaspersky Lab]2
Win-Trojan/MalPatched.Gen [AhnLab]2
Email-Worm.Win32.Zhelatin.xd [Kaspersky Lab]1
FakeAlert-EQ [McAfee]1
Generic PWS.y!bpf [McAfee]1
Generic PWS.y!bpn [McAfee]1
Generic PWS.y!dp [McAfee]1
Packed.Win32.Katusha [Ikarus]1
Packed.Win32.Katusha.e [Kaspersky Lab]1
Possible_Nucrp-6 [Trend Micro]1
PWS.Win32 [Ikarus]1
PWS:Win32/Zbot [Microsoft]1
Suspicious.MH690 [Symantec]1
Trojan.Generic [PC Tools]1
Trojan.Tibs.Gen!Pac.B [PC Tools]1
Trojan:Win32/Tibs.FC [Microsoft]1
Trojan:Win32/Tibs.FZ [Microsoft]1
Trojan:Win32/Yektel.A [Microsoft]1
Trojan-Downloader.Win32.Losabel.hw [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot [Ikarus]1
Trojan-Spy.Win32.Zbot.fzc [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.xxt [Kaspersky Lab]1
TrojanSpy:Win32/Ranbyus.A [Microsoft]1
Virus.Win32.NtsCrypt [Ikarus]1
Virus.Win32.Tibser [Ikarus]1
Win-Trojan/Tibs.5264 [AhnLab]1
Win-Trojan/Tibs.8198.D [AhnLab]1
WORM_NUWAR.EC [Trend Micro]1

Mal/Dorf-F [Sophos] is known to be created as:
%System%\cmd32.exe
%System%\emqsys.dll
%System%\iebho.dll
%System%\kernelwind32.exe
%System%\msxml71.dll
%System%\newmaxxsv234.exe
%System%\ntos.exe
%System%\pavuppad.exe
%System%\win32avs.exe
%System%\win32z.exe
%System%\winsrv32.exe
%System%\word64main.exe
%Temp%\mousehook.dll
%Temp%\ntdll64.dll
%Windir%\cmd32.exe
%Windir%\system\systen.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.