Threat Search: 

ThreatExpert's Statistics for New Malware.ca [McAfee]:

New Malware.ca [McAfee] is also known as:
Threat AliasNumber of Incidents
Trojan-Dropper.Agent [Ikarus]8
Backdoor.Win32.Poison.pg [Kaspersky Lab]5
Suspicious.MH690 [Symantec]4
Trojan.DL.Small.Gen.27 [PC Tools]4
Trojan:Win32/Ertfor.A [Microsoft]4
Mal/Heuri-E [Sophos]3
Possible_Virus [Trend Micro]3
Virus.Win32.Virut.ce [Kaspersky Lab]3
Virus:Win32/Virut.BM [Microsoft]3
W32.Virut.CF [Symantec]3
W32/Scribble-B [Sophos]3
Win32/Virut.E [AhnLab]3
Troj/Dloadr-CLQ [Sophos]2
Trojan-Downloader.Win32.Suurch.oa [Kaspersky Lab]2
AntiVirus2008 [Symantec]1
Backdoor.Ciadoor [Symantec]1
Backdoor:Win32/Poison.M [Microsoft]1
Hacktool.Rootkit [Symantec]1
Infostealer [Symantec]1
Mal/Behav-116 [Sophos]1
Mal/Emogen-I [Sophos]1
Possible_DLDER [Trend Micro]1
TROJ_LDPINCH.ATP [Trend Micro]1
Trojan.DL.Agent.XGB [PC Tools]1
Trojan-Downloader.Win32.Agent.dxg [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad [Ikarus]1
Trojan-Downloader.Win32.FraudLoad.vdlz [Kaspersky Lab]1
Trojan-Downloader.Win32.Small.cyn [Kaspersky Lab]1
Trojan-Downloader.Win32.Suurch.nz [Kaspersky Lab]1
TrojanDownloader:Win32/Delf.AX [Microsoft]1
TrojanDownloader:Win32/Small.gen!X [Microsoft]1
Trojan-PSW.Win32.Delf.bat [Kaspersky Lab]1
Trojan-PSW.Win32.LdPinch.cal [Kaspersky Lab]1
TSPY_DELF.LQF [Trend Micro]1

New Malware.ca [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation11
Brazil2
Germany1

New Malware.ca [McAfee] is known to be created as:
%FontsDir%\hxf.exe
%ProgramFiles%\ndrive\ndrive update agent\ndriveagent.exe
%ProgramFiles%\raydown\program\cooldown.exe
%ProgramFiles%\software informer\softinfo.exe
%System%\hddguard.dll
%System%\svch300.exe
%Temp%\winlogqn.exe
%Windir%\codec.exe
c:\_1.exe
c:\turf_cash\netcourses_gratuit_php.exe
Notes:
  • %FontsDir% is a variable that refers to a virtual folder containing fonts. A typical path is C:\Windows\Fonts.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.