Threat Search: 

ThreatExpert's Statistics for Trojan-Spy.Pophot.WX [PC Tools]:

Trojan-Spy.Pophot.WX [PC Tools] is also known as:
Threat AliasNumber of Incidents
Spy-Agent.br.dll [McAfee]57
W32.Hitapop [Symantec]57
Spy-Agent.br.ini [McAfee]51
TrojanSpy:Win32/Hitpop.gen!C [Microsoft]41
Mal/Emogen-P [Sophos]37
TrojanSpy:Win32/Hitpop.gen!B [Microsoft]37
Mal/Pophot-A [Sophos]33
Trojan-GameThief.Win32.Lmir [Ikarus]31
Mal/Behav-024, Mal/Emogen-P [Sophos]27
TrojanSpy:Win32/Hitpop.AE!dll [Microsoft]22
Trojan-Spy.Win32.Agent.pn [Ikarus]19
Trojan.Hitpop.J [Ikarus]16
Downloader-AZN [McAfee]10
Downloader-AZN.gen [McAfee]10
Generic PWS.y [McAfee]10
TrojanSpy:Win32/Hitpop.AH [Microsoft]10
Mal/Pophot-B [Sophos]7
Trojan Horse [Symantec]6
Trojan-Spy.Win32.Pophot.bze [Ikarus]6
Trojan-Spy.Win32.Pophot.bze [Kaspersky Lab]6
Trojan-Spy.Win32.Pophot.bzi [Kaspersky Lab]6
Trojan-Spy.Win32.Pophot.bzk [Kaspersky Lab]6
Infostealer.Gampass [Symantec]5
Trojan-Spy.Win32.Pophot.brr [Kaspersky Lab]5
Trojan-Spy.Win32.Pophot.gjd [Kaspersky Lab]5
Trojan-Spy.Win32.Pophot.han [Kaspersky Lab]5
Trojan-Spy.Win32.Pophot.btg [Kaspersky Lab]4
Trojan-Spy.Win32.Pophot.cbh [Kaspersky Lab]4
Trojan-Spy.Win32.Pophot.cbj [Kaspersky Lab]4
TROJ_DELF.IVK [Trend Micro]3
Trojan-Spy.Win32.Pophot.cao [Kaspersky Lab]3
Trojan-Spy.Win32.Pophot.caq [Kaspersky Lab]3
Mal/Generic-A, Mal/Pophot-A [Sophos]2
New Malware.aj [McAfee]2
Troj/Spy-BE [Sophos]2
Trojan-Spy.Win32.Pophot [Ikarus]2
Trojan-Spy.Win32.Pophot.bnn [Kaspersky Lab]2
Trojan-Spy.Win32.Pophot.brh [Kaspersky Lab]2
Trojan-Spy.Win32.Pophot.bsf [Kaspersky Lab]2
Trojan-Spy.Win32.Pophot.cdu [Kaspersky Lab]2
Trojan-Spy.Win32.Pophot.hey [Kaspersky Lab]2
Trojan-Spy.Win32.Pophot.hpt [Kaspersky Lab]2
Virus.Win32.Pophot.J [Ikarus]2
Win-Trojan/Pophot.242688.F [AhnLab]2
Backdoor.Trojan [Symantec]1
Downloader-AZN.ini [McAfee]1
Infostealer.Onlinegame [Symantec]1
TROJ_POPHOT.JB [Trend Micro]1
Trojan-Spy.Win32.Pophot.azu [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.bkg [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.bre [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.brq [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.bzx [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.bzy [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cdv [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cfj [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cgs [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cgt [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.chn [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.chx [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cwd [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cxb [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.cxw [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.ger [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.goq [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.gsl [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.gsv [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.gue [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.gvu [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.hau [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.hdv [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.hfh [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.hhn [Kaspersky Lab]1
Trojan-Spy.Win32.Pophot.hja [Kaspersky Lab]1
TrojanSpy:Win32/Hitpop.gen!D [Microsoft]1
TSPY_POPHOT.JD [Trend Micro]1
Win-Trojan/Pophot.241152.H [AhnLab]1
Win-Trojan/Pophot.241664.E [AhnLab]1
Win-Trojan/Pophot.241664.Y [AhnLab]1

Trojan-Spy.Pophot.WX [PC Tools] has the following possible country of origin:
OriginNumber of Incidents
China4

Trojan-Spy.Pophot.WX [PC Tools] is known to be created as:
%System%\2.exe
%System%\blink.exe
%System%\blinktool.exe
%System%\ctm01012.exe
%System%\ctm01025.exe
%System%\ctm02022.exe
%System%\ctm02023.exe
%System%\ctm03003.exe
%System%\ctm03004.exe
%System%\ctm04002.exe
%System%\ctm04004.exe
%System%\ctm04005.exe
%System%\ctm04006.exe
%System%\ctm05001.exe
%System%\ctm07017.exe
%System%\ctm09003.exe
%System%\ctm11006.exe
%System%\ctm11008.exe
%System%\ctm12004.exe
%System%\ctm14004.exe
%System%\ctm15001.exe
%System%\ctm17008.exe
%System%\evg.exe
%System%\inf\rundll33.exe
%System%\inf\scrsyszy080519.scr
%System%\inf\scrsyszy080714.scr
%System%\inf\scrszyys16_080618.dll
%System%\inf\scrszyys16_080714.dll
%System%\inf\scrszyys16_080816.dll
%System%\inf\scrszyys16_080915.dll
%System%\inf\scsys16_080507.dll
%System%\inf\scsys16_080714.dll
%System%\inf\scsys16_080727.dll
%System%\inf\scsys16_080816.dll
%System%\inf\scsys16_080818.dll
%System%\inf\scsys16_080819.dll
%System%\inf\scsys16_080821.dll
%System%\inf\scsys16_080828.dll
%System%\inf\scsys16_080831.dll
%System%\inf\scsys16_080902.dll
%System%\inf\scsys16_080906.dll
%System%\inf\scsys16_080908.dll
%System%\inf\scsys16_080909.dll
%System%\inf\scsys16_080919.dll
%System%\inf\scsys16_081006.dll
%System%\inf\scsys16_081010.dll
%System%\inf\scsys16_081015.dll
%System%\inf\scsys16_081016.dll
%System%\inf\scsys16_081027.dll
%System%\inf\sppdcrs080507.scr
%System%\inf\svch0st.exe
%System%\inf\svchoct.exe
%System%\inf\svchosd.exe
%System%\inf\svchost.exe
%System%\inf\svchostc.exe
%System%\inf\svchosts.exe
%System%\inf\svchowb.exe
%System%\inf\svczynt.exe
%System%\lwfdfia16_080507.dll
%System%\lwizyy16_080618.dll
%System%\lwizyy16_080714.dll
%System%\lwizyy16_080816.dll
%System%\lwizyy16_080915.dll
%System%\mdccasys32_080507.dll
%System%\mwiszcyys32_080618.dll
%System%\mwiszcyys32_080714.dll
%System%\mwiszcyys32_080816.dll
%System%\nnrun.exe
%System%\onestep.exe
%System%\r01014.exe
%System%\r01015.exe
%System%\r02007.exe
%System%\r02012.exe
%System%\r02014.exe
%System%\r02015.exe
%System%\r03003.exe
%System%\r03007.exe
%System%\r04015.exe
%System%\r05004.exe
%System%\r05008.exe
%System%\r05010.exe
%System%\r05013.exe
%System%\r05014.exe
%System%\r05015.exe
%System%\r05018.exe
%System%\r05020.exe
%System%\r05021.exe
%System%\r05022.exe
%System%\r05029.exe
%System%\r07004.exe
%System%\r07006.exe
%System%\r08021.exe
%System%\r08023.exe
%System%\r08024.exe
%System%\r08025.exe
%System%\r09008.exe
%System%\r09011.exe
%System%\r09012.exe
%System%\r09013.exe
%System%\r09015.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).