Threat Search: 

ThreatExpert's Statistics for not-a-virus:RiskTool.Win32.HideWindows [Ikarus]:

not-a-virus:RiskTool.Win32.HideWindows [Ikarus] is also known as:
Threat AliasNumber of Incidents
not-a-virus:RiskTool.Win32.HideWindows [Kaspersky Lab]146
Hacktool.HideWindow [Symantec]87
HackTool.HideWindows [PC Tools]72
HideRun [McAfee]43
HideWindow [McAfee]34
VirTool:Win32/HiddenRun.B [Microsoft]28
Virtool.HideRun.B [PC Tools]20
Hacktool.HideWindows [PC Tools]19
TROJ_HIDEWND.A [Trend Micro]19
Tool-HideWindow [McAfee]18
Win32/IRCBot.worm.variant [AhnLab]15
RiskTool.HideWindows.K [PC Tools]14
SecurityRisk.Cmdow [Symantec]13
Tool:Win32/Cmdow [Microsoft]12
Tool:Win32/HideWindows [Microsoft]9
Mal/Packer [Sophos]8
Mal/Generic-A [Sophos]5
RiskWare.HideWindows.B [PC Tools]4
Generic PWS.y [McAfee]3
not-a-virus:RiskTool.Win32.HideWindows.k [Kaspersky Lab]3
W32.Spybot.Worm [Symantec]3
not-a-virus:Client-IRC.Win32.mIRC.603 [Kaspersky Lab]2
not-a-virus:NetTool.Win32.Sniffer.c [Kaspersky Lab]2
not-a-virus:PSWTool.Win32.PassView.162 [Kaspersky Lab]2
Troj/Flood-CK [Sophos]2
Backdoor.mIRC-based.P [PC Tools]1
Backdoor:Win32/IRCbot [Microsoft]1
Dropper/MulDrop.1102801 [AhnLab]1
Generic.dx [McAfee]1
Mal/EncPk-E [Sophos]1
Mal/Packer, Mal/EncPk-E [Sophos]1
not-a-virus:Client-IRC.Win32.mIRC.602 [Kaspersky Lab]1
Trojan.DR.Duckirc.Gen [PC Tools]1
Trojan.Dropper [Symantec]1
Trojan.Win32.Pasta.gum [Kaspersky Lab]1
Trojan.Zlob [Ikarus]1
Trojan-Clicker.BAT.Agent.p [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.bjts [Kaspersky Lab]1
Trojan-Dropper.BAT.Agent.ah [Kaspersky Lab]1
Win-Trojan/Hidewnd.B [AhnLab]1
WORM_SPYBOT.DAM [Trend Micro]1

not-a-virus:RiskTool.Win32.HideWindows [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
United Kingdom5
China1
France1
Israel1
Russian Federation1

not-a-virus:RiskTool.Win32.HideWindows [Ikarus] is known to be created as:
%CommonPrograms%\coffin of evil multi scanner\datos\cmdow.exe
%ProgramFiles%\accessories\backup\system\vsf\explorer2.exe
%ProgramFiles%\gomez\gomezpeer\myrun.exe
%ProgramFiles%\killsh\hd.exe
%ProgramFiles%\kjhkjhjk\hd.exe
%System%\cmdow.exe
%System%\dk\lam3.exe
%System%\dk\lam4.exe
%System%\drive\lam3.exe
%System%\drive\lam4.exe
%System%\drivers\etc\cache03\smnt.exe
%System%\drivers\etc\tmp7\smnt.exe
%System%\drivers\etc\wtf22\smnt.exe
%System%\gon.exe
%System%\hd.exe
%System%\mansor.exe
%System%\mirc.exe
%System%\mirc32.exe
%System%\mnut\lam3.exe
%System%\mnut\lam4.exe
%System%\newsfr.exe
%System%\norton.exe
%System%\of.exe
%System%\securaq.exe
%System%\sohid.com
%System%\stafsrun.exe
%System%\system dr\mansr.exe
%System%\system dr\sohd.com
%System%\temp2.exe
%System%\ttt\lam3.exe
%System%\ttt\lam4.exe
%System%\useru.exe
%Temp%\7zs1.tmp\cmdow.exe
%Temp%\cmdow.exe
%Windir%\kkkdk\fra.exe
%Windir%\tsco.exe
c:\winnt\system32\certsrv\0w3x24\mscmd.exe
c:\winnt\system32\lavan\devcheck.exe
c:\winnt\system32\msnq32.exe
c:\winnt\system32\os\devcheck.exe
Notes:
  • %CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.