Threat Search: 

ThreatExpert's Statistics for TROJ_DLOADER.FXN [Trend Micro]:

TROJ_DLOADER.FXN [Trend Micro] is also known as:
Threat AliasNumber of Incidents
Trojan.DL.VB.AAVI [PC Tools]874
BKDR_CIADOOR.EA [Trend Micro]814
Backdoor.IRC.Bot [Symantec]810
Downloader.gen.a [McAfee]653
Trojan-Downloader.Win32.VB.bsa [Kaspersky Lab]639
Generic.dx [McAfee]168
Downloader [Symantec]140
IRC.Backdoor.Trojan [Symantec]139
Downloader-BJM [McAfee]77
Troj/Agent-GGQ [Sophos]77
TrojanDownloader:Win32/VB [Microsoft]73
Trojan.DL.Tipikit.Gen [PC Tools]55
Generic Downloader.x [McAfee]40
Virus.Win32.VB.FXE [Ikarus]32
Adware.Adsponsor [PC Tools]26
AdClicker-FC.dr [McAfee]25
Mal/DownLdr-O [Sophos]16
Win-Trojan/Xema.variant [AhnLab]16
Adware.UltimateDefend.C [PC Tools]13
Trojan.DL.Small.AOOP [PC Tools]9
Trojan-Downloader.VB!sd6 [PC Tools]8
Troj/Tipiki-Fam, Troj/Tipiki-Gen [Sophos]7
TROJ_DLOADER.KYU [Trend Micro]7
New Malware.aj [McAfee]6
Trojan-Downloader.Win32.Small.vab [Kaspersky Lab]6
Trojan-Downloader.Win32.Small.vvk [Kaspersky Lab]6
TrojanDownloader:Win32/Matcash.B [Microsoft]6
Virus.Win32.TratBHO [Ikarus]5
Win32.SuspectCrc [Ikarus]5
Adware-ISM [McAfee]4
Downloader.MisleadApp [Symantec]4
Generic BackDoor [McAfee]4
Mal/Behav-151, Mal/Behav-112 [Sophos]4
Mal/Generic-A [Sophos]4
Packed/Upack [AhnLab]4
Suspicious.MH690 [Symantec]4
TROJ_DLOADER.YGM [Trend Micro]4
Trojan.DL.Agent.ESQU [PC Tools]4
Trojan.DL.Wigon.Gen.6 [PC Tools]4
Trojan.Popwin [Symantec]4
Trojan-Downloader.Win32.Adload.ma [Kaspersky Lab]4
TrojanDownloader:Win32/VB.BK [Microsoft]4
Trojan-Dropper.Win32.Agent.algr [Kaspersky Lab]4
Trojan-Dropper.Win32.Vaultac [Ikarus]4
Trojan-GameThief.Win32.Magania.gen [Kaspersky Lab]4
Virus.Win32.SdBot.4142 [Ikarus]4
Backdoor.Trojan [Symantec]3
Puper [McAfee]2
Trojan.Retapu.D [Ikarus]2
Trojan-Downloader.Win32.Small.usn [Kaspersky Lab]2
Trojan-Downloader.Win32.Small.ved [Kaspersky Lab]2
Adware.DR.AdBand.H [PC Tools]1
Adware.ISMonitor [Symantec]1
Adware:Win32/InternetSpeedMonitor [Microsoft]1
Generic PUP.x [McAfee]1
Infostealer.Gampass [Symantec]1
Infostealer.Onlinegame [Symantec]1
New Malware.it [McAfee]1
not-a-virus:AdWare.Win32.AdBand.z [Kaspersky Lab]1
RogueAntiSpyware.SystemDefender [PC Tools]1
Troj/FakeAV-EG [Sophos]1
Trojan.Adclicker [Symantec]1
Trojan.Popuper [PC Tools]1
Trojan.Win32.Agent.ltt [Kaspersky Lab]1
Trojan-Downloader.Small!sd6 [PC Tools]1
Trojan-Downloader.Small.VVK [PC Tools]1
Trojan-Downloader.Win32.Winlagons.ga [Kaspersky Lab]1
Trojan-Downloader.Win32.Winlagons.im [Kaspersky Lab]1
Trojan-Downloader.Win32.Winlagons.iq [Kaspersky Lab]1
Trojan-Downloader.Win32.Winlagons.ix [Kaspersky Lab]1
Trojan-Downloader.Win32.Winlagons.po [Kaspersky Lab]1
Trojan-Downloader.Win32.Winlagons.ti [Kaspersky Lab]1
Trojan-Downloader.Win32.Winlagons.wr [Kaspersky Lab]1
Virus.Win32.Blindeye [Ikarus]1
Virus.Win32.Rootkit [Ikarus]1

TROJ_DLOADER.FXN [Trend Micro] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation18
China10
Sweden3
Belgium1

TROJ_DLOADER.FXN [Trend Micro] is known to be created as:
%FontsDir%\svchost.exe
%System%\.00cd1a40\00cd1a40.exe
%System%\0309c26e.exe
%System%\bm3\db-1bn.exe
%System%\bx4\bchksc2.exe
%System%\install.exe
%System%\mm3\gradodv3.exe
%System%\px4\gradodv3.exe
%System%\winupdate.exe
%System%\x4\demw136.exe
%System%\xdb4\db-1bn.exe
%System%\xip2\db-1bn.exe
%Temp%\22.exe
%Temp%\28.exe
%Temp%\setup.exe
%Windir%\61176.exe
%Windir%\b3423423.exe
%Windir%\temp\3.exe
%Windir%\two222222.exe
Notes:
  • %FontsDir% is a variable that refers to a virtual folder containing fonts. A typical path is C:\Windows\Fonts.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.