Threat Search: 

ThreatExpert's Statistics for Mal/EncPk-BA [Sophos]:

Mal/EncPk-BA [Sophos] is also known as:
Threat AliasNumber of Incidents
Email-Worm.Win32.Brontok.q [Kaspersky Lab]7
W32/Rontokbro.gen@MM [McAfee]7
Email-Worm.Win32.Brontok [Ikarus]6
Worm:Win32/Tofam!rts [Microsoft]6
I-Worm.Brontok.Gen.2 [PC Tools]4
Suspicious.MH690 [Symantec]4
Win-Trojan/Brontok.45400 [AhnLab]4
W32.Rontokbro@mm [Symantec]3
Email-Worm.Brontok.Q [PC Tools]2
Trojan Horse [Symantec]2
Trojan.KillAV [Symantec]2
Win32/Brontok.worm.42089 [AhnLab]2
Backdoor.Win32.Ciadoor [Ikarus]1
Email-Worm.Win32.Brontok.A [Ikarus]1
Generic.dx [McAfee]1
Hacktool.PWSteal [Symantec]1
I-Worm.Brontok.CM [PC Tools]1
PWS-Banker [McAfee]1
PWS-IN [McAfee]1
TROJ_SAGIC.A [Trend Micro]1
Trojan.Win32.Pakes.jsh [Kaspersky Lab]1
Trojan-Banker.Win32.Banker.qit [Kaspersky Lab]1
Trojan-PSW.Sagic!sd5 [PC Tools]1
Trojan-PSW.Win32.Sagic.c [Kaspersky Lab]1
Worm:Win32/Brontok.AK@mm [Microsoft]1

Mal/EncPk-BA [Sophos] has the following possible countries of origin:
OriginNumber of Incidents
China1
Germany1
Japan1

Mal/EncPk-BA [Sophos] is known to be created as:
%Temp%\mps-15se.exe
%Windir%\system\win.exe
%Windir%\tasks\kav32.exe
Notes:
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.