Threat Search: 

ThreatExpert's Statistics for Net-Worm.Win32.Allaple [Ikarus]:

Net-Worm.Win32.Allaple [Ikarus] is also known as:
Threat AliasNumber of Incidents
W32/RAHack [McAfee]149
W32.Rahack.W [Symantec]148
Win-Trojan/Starman.Gen [AhnLab]148
Worm:Win32/Allaple.A [Microsoft]148
WORM_ALLAPLE.IK [Trend Micro]148
Net-Worm.Win32.Allaple.b [Kaspersky Lab]147
W32/Allaple-F [Sophos]147
Worm.Allaple.Gen [PC Tools]144
W32.Virut.B [Symantec]8
Virus.Win32.Virut.n [Kaspersky Lab]6
Win32.Virut.Gen [PC Tools]5
PE_VIRUT.D [Trend Micro]4
Virus:Win32/Virut.AK [Microsoft]4
Packed.Win32.Black.a [Kaspersky Lab]3
Virus:Win32/Virut.dam [Microsoft]3
W32/Virut.gen [McAfee]3
W32/Virut-L [Sophos]3
Win32/Virut.D [AhnLab]3
Backdoor.Win32.Agobot.aoi [Kaspersky Lab]2
I-Worm.Bagle.LC [PC Tools]2
Mal/Behav-285 [Sophos]2
Net-Worm.Win32.Allaple.e [Kaspersky Lab]2
Troj/PWS-AYJ [Sophos]2
Trojan.Tooso.R [Symantec]2
W32/IRCbot.gen.u [McAfee]2
Win32/IRCBot.worm.variant [AhnLab]2
Win32/Virut.B [AhnLab]2
Worm.DR.Delf.AHJT [PC Tools]2
Backdoor.VanBot.EP [PC Tools]1
Generic.dx [McAfee]1
Mal/Allaple-A [Sophos]1
Mal/Packer, Mal/Allaple-A [Sophos]1
Mal/WaledPak-B [Sophos]1
Mal_Allaple [Trend Micro]1
Net-Worm.Win32.Bobic.dq [Kaspersky Lab]1
PE_VIRUT.AV [Trend Micro]1
PE_VIRUT.YE [Trend Micro]1
Trojan:Win32/Pakes [Microsoft]1
Virus.Virut.na [PC Tools]1
Virus.Win32.Virut.av [Kaspersky Lab]1
Virus:Win32/Virut.AC [Microsoft]1
W32.IRCBot [Symantec]1
W32.Spybot.Worm [Symantec]1
W32.Virut.W [Symantec]1
W32/Bagle.gen [McAfee]1
W32/Sdbot.worm [McAfee]1
W32/Spybot.worm.gen [McAfee]1
W32/Vetor-A [Sophos]1
W32/Vetor-G [Sophos]1
W32/Virut.gen.a [McAfee]1
W32/Virut.h [McAfee]1
W32/Virut.remnants [McAfee]1
W32/Virut-W [Sophos]1
Win32/Bagle.worm.40565 [AhnLab]1
Win32/Kolab.worm.561152 [AhnLab]1
Win32/Kolabc.worm.85363 [AhnLab]1
Win-Trojan/Black.554496.B [AhnLab]1
Win-Trojan/Pakes.405504.C [AhnLab]1
Worm.Agobot.WPCT [PC Tools]1
Worm.Bobax.AB [PC Tools]1
Worm.Poebot.KC [PC Tools]1
Worm:Win32/Bobax.U [Microsoft]1
Worm:Win32/Wootbot.EA [Microsoft]1
Worm:Win32/Wootbot.EG [Microsoft]1
WORM_SDBOT.GAV [Trend Micro]1

Net-Worm.Win32.Allaple [Ikarus] is known to be created as:
%AppData%\hidn\hidn2.exe
%AppData%\hidn\hldrrr.exe
%ProgramFiles%\common files\system\ado\tsektjkj.exe
%ProgramFiles%\netmeeting\rsewzjqn.exe
%System%\iexplorer.exe
%System%\igfsfdfsd32ss.exe
%System%\nxwscie.exe
%System%\urdvxc.exe
%System%\windsys2.exe
%System%\xakbtqaexkoibq.exe
%Windir%\pchealth\helpctr\system\compatctr\hrtbebze.exe
%Windir%\pchealth\helpctr\system\compatctr\jbnxjtkn.exe
%Windir%\pchealth\helpctr\system\compatctr\tnslrrhk.exe
%Windir%\pchealth\helpctr\system\compatctr\zlhqrlbx.exe
%Windir%\pchealth\helpctr\system\dvdupgrd\shrrtjet.exe
%Windir%\pchealth\helpctr\system\errmsg\vlvxqrek.exe
%Windir%\pchealth\helpctr\system\errors\jcjjlqnq.exe
%Windir%\pchealth\helpctr\system\netdiag\hsjqschn.exe
%Windir%\pchealth\helpctr\system\netdiag\xrvxszvs.exe
%Windir%\pchealth\helpctr\system\panels\nntlskwn.exe
%Windir%\pchealth\helpctr\system\panels\sncncweb.exe
%Windir%\pchealth\helpctr\system\rc\qbrblthb.exe
%Windir%\pchealth\helpctr\system\remote assistance\rqxjhbsl.exe
%Windir%\pchealth\helpctr\system\remote assistance\rzqstbqq.exe
%Windir%\pchealth\helpctr\system\remote assistance\wesnhzec.exe
%Windir%\pchealth\helpctr\system\sysinfo\bjlkjrls.exe
%Windir%\pchealth\helpctr\system\sysinfo\cntbrbzr.exe
%Windir%\pchealth\helpctr\system\sysinfo\jbrhbztz.exe
%Windir%\pchealth\helpctr\system\sysinfo\jrtqcssx.exe
%Windir%\pchealth\helpctr\system\sysinfo\rbcjjwqr.exe
%Windir%\pchealth\helpctr\system\sysinfo\rercrnhh.exe
%Windir%\pchealth\helpctr\system\sysinfo\rnbrkrlv.exe
%Windir%\pchealth\helpctr\system\sysinfo\vkchbbxh.exe
%Windir%\pchealth\helpctr\system\updatectr\lwklbvze.exe
%Windir%\pchealth\helpctr\system\updatectr\qxshkkqn.exe
%Windir%\pchealth\helpctr\system\updatectr\rrbvcsbb.exe
%Windir%\pchealth\helpctr\system\updatectr\snqesjrk.exe
%Windir%\pchealth\helpctr\system\updatectr\trkhkjxz.exe
%Windir%\web\wcxnjhhj.exe
c:\inetpub\wwwroot\kkvwbsrw.exe
c:\tvsknrse.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.