Threat Search: 

ThreatExpert's Statistics for Trojan.Virantix.C [Symantec]:

Trojan.Virantix.C [Symantec] is also known as:
Threat AliasNumber of Incidents
Mal/EncPk-EQ [Sophos]508
TrojanDownloader:Win32/Renos [Microsoft]259
Generic Dropper.bu [McAfee]222
Trojan.Win32.FakePowav [Ikarus]164
Generic FakeAlert.d [McAfee]157
VirTool.Win32.Obfuscator.DF [Ikarus]145
Downloader.gen.a [McAfee]132
TROJ_VIRANTIX.BF [Trend Micro]122
Win-Trojan/Agent.6144.HK [AhnLab]122
Backdoor.Win32.Small.ejx [Kaspersky Lab]121
Mal/TibsPak, Mal/EncPk-BB [Sophos]121
TrojanDownloader:Win32/FakeRean.gen!C [Microsoft]120
Mal/FakeAle-C [Sophos]107
Trojan:Win32/Zlob.AR [Microsoft]105
Trojan.Win32.Agent2.aul [Kaspersky Lab]100
FakeAlert-XPSecCenter [McAfee]97
FakeAlert-C.dr [McAfee]91
Trojan.Agent [PC Tools]90
Adware.Agent.ZO [PC Tools]86
Trojan-Downloader.Win32.FraudLoad.vdjr [Kaspersky Lab]81
Trojan-Downloader.Win32.BHO.wa [Kaspersky Lab]80
Win-Trojan/Xema.variant [AhnLab]78
Trojan.Virantix!sd6 [PC Tools]74
VirTool:WinNT/Xantvi.A [Microsoft]68
Trojan:Win32/Wantvi.I [Microsoft]67
Mal/Zlob-AC [Sophos]65
Puper [McAfee]64
Trojan.Win32.Zlob.AR [Ikarus]64
Trojan-Downloader.BHO!sd6 [PC Tools]64
not-a-virus:FraudTool.Win32.UltimateDefender.cm [Kaspersky Lab]62
VirTool:WinNT/Xantvi.gen!A [Microsoft]61
Troj/FakeVir-GL [Sophos]53
Virus.Win32.Virut.au [Ikarus]40
Backdoor.Win32.UltimateDefender [Ikarus]39
Virus.Win32.Zbot.AQM [Ikarus]39
TrojanDownloader:Win32/Eldycow.gen!A [Microsoft]35
Virus.Win32.Lighty [Ikarus]29
Mal/Generic-A [Sophos]28
Rootkit.Renos.Gen.11 [PC Tools]27
Backdoor.Win32.UltimateDefender.xm [Kaspersky Lab]26
Generic.dx [McAfee]25
Downloader-BKK [McAfee]23
Virus.Win32.FakeAlert.AJ [Ikarus]22
Backdoor.Win32.UltimateDefender.a [Kaspersky Lab]19
Trojan-Downloader.Win32.FakeRean [Ikarus]19
Trojan-Clicker.Win32.Klik [Ikarus]17
TROJ_RENOS.AKQ [Trend Micro]12
Trojan:Win32/Renos.I [Microsoft]12
Hoax.Win32.Renos [Ikarus]11
Packer.Malware.Lighty.I [Ikarus]11
Packer.Malware.Lighty.O [Ikarus]11
Troj/Agent-HHC [Sophos]11
Trojan:Win32/Dursg.B [Microsoft]10
Hoax.Win32.Renos.ffk [Kaspersky Lab]9
Hoax.Win32.Renos.vavf [Kaspersky Lab]9
Troj/FakeAle-ID [Sophos]9
Trojan.Win32.Buzus [Ikarus]9
Trojan.Win32.Buzus.aeip [Kaspersky Lab]9
W32/Virut-Gen [Sophos]9
Generic Downloader.x [McAfee]8
Generic PUP.x [McAfee]7
Mal/Behav-112 [Sophos]7
PE_VIRUT.AP [Trend Micro]7
PWS:Win32/Ldpinch.BO [Microsoft]7
TrojanDropper:Win32/Olmarik.A [Microsoft]7
Virus:Win32/Virut.BI [Microsoft]7
TrojanClicker:Win32/Klik [Microsoft]6
Virus.Win32.Virut.bu [Kaspersky Lab]6
Win-Trojan/Fraudload.9728 [AhnLab]6
Backdoor.Win32.UltimateDefender.gml [Kaspersky Lab]5
Trojan.Virantix [PC Tools]5
Virus.Win32.Lighty.C [Ikarus]5
Backdoor.IRC!sd6 [PC Tools]4
Hoax.Win32.Renos.esb [Kaspersky Lab]4
Hoax.Win32.Renos.fef [Kaspersky Lab]4
Hoax.Win32.Renos.fei [Kaspersky Lab]4
Hoax.Win32.Renos.fex [Kaspersky Lab]4
Hoax.Win32.Renos.fge [Kaspersky Lab]4
Mal/EncPk-EQ, Mal/Basine-C [Sophos]4
Troj/FakeAle-IW [Sophos]4
Troj/FakeAle-JK [Sophos]4
Trojan.Win32.Agent.apwo [Kaspersky Lab]4
Trojan.Win32.Pakes.lcy [Kaspersky Lab]4
Trojan.Win32.Pakes.lgf [Kaspersky Lab]4
Trojan.Win32.Pakes.lnh [Kaspersky Lab]4
Trojan:Win32/Malagent [Microsoft]4
Trojan-Downloader.Win32.Agent.ajiw [Kaspersky Lab]4
Trojan-Downloader.Win32.FraudLoad.vbys [Kaspersky Lab]4
Trojan-Downloader.Win32.FraudLoad.vdlg [Kaspersky Lab]4
Trojan-Downloader.Win32.Small.afck [Kaspersky Lab]4
TrojanDownloader:Win32/Renos.FJ [Microsoft]4
Trojan-Spy.Win32.Zbot.gmx [Kaspersky Lab]4
AntiVirus2009 [Symantec]3
Backdoor.Win32.UltimateDefender.gen [Kaspersky Lab]3
FakeAlert-AP [McAfee]3
Generic BackDoor [McAfee]3
Generic FakeAlert.a [McAfee]3
Mal/Basine-C [Sophos]3
not-a-virus:FraudTool.Win32.XPSecurityCenter.ai [Kaspersky Lab]3
Troj/FakeAle-DQ [Sophos]3

Trojan.Virantix.C [Symantec] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation175
Netherlands1

Trojan.Virantix.C [Symantec] is known to be created as:
%AppData%\microsoft\windows\lsass.exe
%CommonAppData%\fgtcpefi\tkvqdqzg.exe
%ProgramFiles%\antispywarexp2009\uninstall.exe
%ProgramFiles%\antiviruspro2009\uninstall.exe
%ProgramFiles%\richvideocodec\install.exe
%ProgramFiles%\uninstall.exe
%ProgramFiles%\xp_antispyware\uninstall.exe
%System%\brastk.exe
%System%\braviax.exe
%System%\dllcache\beep.sys
%System%\dllcache\figaro.sys
%System%\drivers\clbdriver.sys
%System%\he73hdfe.dll
%System%\lpvideo.dll
%System%\ntos.exe
%System%\reset5e.dll
%System%\tdssl.dll
%System%\tm8259.exe
%Temp%\beep1.sys
%Temp%\beep2.sys
%Temp%\brastk.exe
%Temp%\braviax.exe
%Temp%\buritos.exe
%Temp%\csrssc.exe
%Temp%\dropper_286962.exe
%Temp%\load.exe
%Temp%\update.exe
%Temp%\wini10491.exe
%Temp%\winlogan.exe
%Windir%\runsql.exe
%Windir%\svc.exe
%Windir%\svhoster.exe
%Windir%\svw.exe
%Windir%\svx.exe
%Windir%\svzip.exe
%Windir%\vlc.exe
%Windir%\wdmon.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.