Threat Search: 

ThreatExpert's Statistics for Packed.Win32.CPEX-based.f [Kaspersky Lab]:

Packed.Win32.CPEX-based.f [Kaspersky Lab] is also known as:
Threat AliasNumber of Incidents
W32.Spybot.Worm [Symantec]14
W32/Sdbot.worm.gen.as [McAfee]14
WORM_CPEX.F [Trend Micro]6
WORM_SPYBOT.XZ [Trend Micro]5
Trojan.Dropper [Symantec]4
New Malware.db [McAfee]3
Packed/PPP [PC Tools]3
W32/Sdbot.worm.gen.ax [McAfee]2
Backdoor.Rizo!sd5 [PC Tools]1
Generic.dx [McAfee]1
TROJ_CPEX.G [Trend Micro]1
Trojan:Win32/Ircbrute [Microsoft]1
W32/IRCBot-XD [Sophos]1
Worm.RBot.OKM [PC Tools]1
Worm.RBot.OSP [PC Tools]1
Worm.RBot.OTG [PC Tools]1
Worm.RBot.OTL [PC Tools]1
Worm.RBot.OTU [PC Tools]1
Worm.RBot.OUD [PC Tools]1
Worm.Rbot.UPY [PC Tools]1
Worm.RBot.UQA [PC Tools]1
Worm.RBot.UQV [PC Tools]1
Worm.RBot.UXL [PC Tools]1
Worm.RBot.UXR [PC Tools]1
Worm.RBot.WJN [PC Tools]1
Worm.SdBot.TGM [PC Tools]1
WORM_IRCBOT.AQW [Trend Micro]1
WORM_SDBOT.FGK [Trend Micro]1
WORM_SDBOT.FGP [Trend Micro]1
WORM_SDBOT.FKX [Trend Micro]1
WORM_SDBOT.FLY [Trend Micro]1
WORM_SDBOT.FNG [Trend Micro]1
WORM_SPYBOT.AKX [Trend Micro]1

Packed.Win32.CPEX-based.f [Kaspersky Lab] is known to be created as:
%System%\inetsrv\direct.exe
%System%\inetsrv\host32.exe
%System%\inetsrv\host32srv.exe
%System%\inetsrv\msnmsgr.exe
%System%\inetsrv\rpcall.exe
%System%\inetsrv\sdhost.exe
%System%\inetsrv\servcs.exe
%System%\inetsrv\servu.exe
%System%\inetsrv\sql.exe
%System%\inetsrv\stacture.exe
%System%\inetsrv\sys.exe
%System%\inetsrv\sys32.exe
%System%\inetsrv\tray.exe
%System%\inetsrv\usb.exe
%System%\inetsrv\win.exe
%System%\inetsrv\win32.exe
%System%\nsecurity.exe
%Temp%\qjso.exe
%Windir%\nitty.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.