Threat Search: 

ThreatExpert's Statistics for Mal/FakeSpy-A [Sophos]:

Mal/FakeSpy-A [Sophos] is also known as:
Threat AliasNumber of Incidents
W32.Koobface!gen [Symantec]23
Net-Worm.Koobface [PC Tools]12
Net-Worm.Win32.Koobface.cjt [Kaspersky Lab]9
Win-Trojan/Malware.55808.I [AhnLab]9
Net-Worm.Win32.Koobface [Ikarus]6
Net-Worm.Koobface.hx [PC Tools]5
Net-Worm.Win32.Koobface.cju [Kaspersky Lab]5
W32/Koobface.worm.gen.s [McAfee]5
Worm:Win32/Koobface.P [Microsoft]5
Net-Worm.Win32.Koobface.cjz [Kaspersky Lab]4
Trojan.Win32.SuspectCRC [Ikarus]4
W32.Koobface.A [Symantec]4
W32/Koobface.worm.gen.d [McAfee]4
W32/Koobface.worm.gen.o [McAfee]3
PWS:Win32/Zbot.gen!R [Microsoft]2
Trojan Horse [Symantec]2
Trojan:Win32/Meredrop [Microsoft]2
Trojan:Win32/Sisproc [Microsoft]2
W32.Koobface.D [Symantec]2
Backdoor.Win32.Buterat [Ikarus]1
Backdoor.Win32.Buterat.am [Kaspersky Lab]1
Dropper/Malware.38912.G [AhnLab]1
Dropper/Malware.40960.BC [AhnLab]1
Generic PWS.y!bdl [McAfee]1
Net-Worm.Win32.Koobface.cjc [Kaspersky Lab]1
Net-Worm.Win32.Koobface.cjr [Kaspersky Lab]1
PWS:Win32/Ldpinch.gen!D [Microsoft]1
Trojan.Assist [Ikarus]1
Trojan.Win32.Assist [Ikarus]1
Trojan.Win32.Assist.mk [Kaspersky Lab]1
Trojan.Win32.Assist.np [Kaspersky Lab]1
Trojan.Win32.Meredrop [Ikarus]1
Trojan-Banker.Win32.Bancos [Ikarus]1
Trojan-Banker.Win32.Bancos.ibn [Kaspersky Lab]1
Trojan-Banker.Win32.Bancos.jic [Kaspersky Lab]1
Trojan-PSW.Win32.Agent.oez [Kaspersky Lab]1
Trojan-PSW.Win32.Delf.ekv [Kaspersky Lab]1
TSPY_DELF.SMM [Trend Micro]1
W32.Koobface.C [Symantec]1
W32/Koobface.worm.gen.e [McAfee]1
Win-Trojan/Assist.41216.EO [AhnLab]1
Win-Trojan/Assist.55040 [AhnLab]1
Win-Trojan/Facebook.55552 [AhnLab]1
Win-Trojan/Malware.102656 [AhnLab]1
Win-Trojan/Malware.103680 [AhnLab]1
Win-Trojan/Malware.34560.B [AhnLab]1
Win-Trojan/ZBot.86272 [AhnLab]1
Worm:Win32/Koobface.M [Microsoft]1
Worm:Win32/Koobface.N [Microsoft]1
Worm:Win32/Koobface.R [Microsoft]1

Mal/FakeSpy-A [Sophos] is known to be created as:
%System%\sdra64.exe
%Temp%\ld15.exe
%Temp%\zpskon_1257641561.exe
%Windir%\freddy72.exe
%Windir%\freddy73.exe
%Windir%\ld15.exe
%Windir%\pp12.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.