Threat Search: 

ThreatExpert's Statistics for Troj/Agent-GMF [Sophos]:

Troj/Agent-GMF [Sophos] is also known as:
Threat AliasNumber of Incidents
BackDoor-CZP [McAfee]89,900
Backdoor.Win32.Turkojan.ake [Kaspersky Lab]83,230
BKDR_TURKOJAN.AT [Trend Micro]80,040
Backdoor.Turkojan [PC Tools]77,140
Trojan:Win32/Turkojan.A!dll [Microsoft]77,140
Trojan Horse [Symantec]59,079
Win-Trojan/Turkojan.7168.M [AhnLab]55,390
Backdoor.Turkojan.AO [Ikarus]38,570
Backdoor.Ciadoor [Symantec]29,290
Backdoor.Win32.Turkojan [Ikarus]22,255
TROJ_DELF.EFH [Trend Micro]10,730
TROJ_DELF.EMO [Trend Micro]312
Backdoor.Win32.Turkojan.jv [Kaspersky Lab]303
TrojanSpy:Win32/Turkahn.A [Microsoft]272
Backdoor.Turkojan.H [PC Tools]259
Win-Trojan/Agent.33280.DM [AhnLab]203
BackDoor-DWS [McAfee]115
Generic.dx [McAfee]105
Backdoor.Win32.Turkojan.r [Kaspersky Lab]71
BackDoor-CZP.dr [McAfee]65
W32.IRCBot.Gen [Symantec]63
Win-Trojan/Turkojan.307712 [AhnLab]47
Generic PWS.y [McAfee]40
Trojan-Dropper.Delf [Ikarus]38
Backdoor:Win32/Turkojan.AI [Microsoft]31
Backdoor.Turkojan.Gen [PC Tools]27
Backdoor.Turkojan.il [PC Tools]25
Trojan-PWS.Win32.WOW.aam [Ikarus]23
Trojan.IRCBot [PC Tools]14
Downloader.Delphi [Ikarus]11
BackDoor-CZP.dr.gen.a [McAfee]5
Backdoor:Win32/Turkojan.gen!A [Microsoft]2
Downloader [Symantec]2
Generic BackDoor [McAfee]2
VirTool:Win32/DelfInject.gen!L [Microsoft]2
Backdoor.Win32.Turkojan.sv [Kaspersky Lab]1
Generic BackDoor!m [McAfee]1

Troj/Agent-GMF [Sophos] is known to be created as:
%System%\cmsetac.dll
%System%\guezzoun.scr
%System%\ntdtcstp.dll
%Temp%\cmsetac.dll
%Temp%\ixp000.tmp\ntdtcstp.dll
%Temp%\ntdtcstp.dll
%Temp%\server.exe
%Temp%\ufosmbriog.exe
%Windir%\cmsetac.dll
%Windir%\exefile.exe
%Windir%\hamoode.exe
%Windir%\kasper.exe
%Windir%\msstwain32.exe
%Windir%\mstwain32.exe
%Windir%\ntdtcstp.dll
%Windir%\svhost.exe
c:\111111111111.exe
c:\cmsetac.dll
c:\ntdtcstp.dll
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.