Threat Search: 

ThreatExpert's Statistics for Trojan.Win32.Cosmu [Ikarus]:

Trojan.Win32.Cosmu [Ikarus] is also known as:
Threat AliasNumber of Incidents
Trojan Horse [Symantec]32
Trojan.Win32.Cosmu.dqz [Kaspersky Lab]18
Trojan.Generic [PC Tools]17
Generic.dx!hiu [McAfee]16
Win-Trojan/Cosmu.26116 [AhnLab]16
Mal/FakeAV-BX, Mal/EncPk-MC, Mal/EncPk-MA [Sophos]12
Mal/TDSSPack-U [Sophos]11
Mal/Generic-A [Sophos]8
Trojan:Win32/Alureon.CT [Microsoft]6
Mal/Generic-A, Mal/FakeAV-BX, Mal/EncPk-MC, Mal/EncPk-MA [Sophos]4
Packed.Win32.TDSS.z [Kaspersky Lab]4
Trojan.Win32.Cosmu.eht [Kaspersky Lab]4
TrojanClicker:Win32/Hatigh.C [Microsoft]4
Win-Trojan/Malware.86528.H [AhnLab]4
DNSChanger!cb [McAfee]2
Mal/TDSSPack-U, Mal/Alureon-F [Sophos]2
Packed.Win32.Koblu.c [Kaspersky Lab]2
Packed.Win32.Krap.ah [Kaspersky Lab]2
Packed.Win32.TDSS.aa [Kaspersky Lab]2
Trojan.Win32.Agent2.cmhs [Kaspersky Lab]2
Trojan:Win32/Alureon.DD [Microsoft]2
Trojan-Downloader.Win32.Clopack.in [Kaspersky Lab]2
Generic FakeAlert!dl [McAfee]1
Generic Qhost!bd [McAfee]1
Generic.dx!fna [McAfee]1
Generic.dx!iza [McAfee]1
Generic.dx!jcp [McAfee]1
Mal/FakeAV-BT [Sophos]1
Mal/StartP-A [Sophos]1
Mal/VB-G [Sophos]1
Possible_Virus [Trend Micro]1
Trojan.Dropper [Symantec]1
Trojan.Win32.Cosmu.ciy [Kaspersky Lab]1
Trojan.Win32.Cosmu.cjc [Kaspersky Lab]1
Trojan.Win32.Cosmu.cjn [Kaspersky Lab]1
Trojan.Win32.Cosmu.cyq [Kaspersky Lab]1
Trojan.Win32.Cosmu.cys [Kaspersky Lab]1
Trojan.Win32.Cosmu.dqf [Kaspersky Lab]1
Trojan.Win32.Cosmu.edv [Kaspersky Lab]1
Trojan.Win32.Cosmu.eiv [Kaspersky Lab]1
Trojan.Win32.Cosmu.eol [Kaspersky Lab]1
Trojan.Win32.Cosmu.epf [Kaspersky Lab]1
Trojan.Win32.Cosmu.ewo [Kaspersky Lab]1
Trojan.Win32.Cosmu.fzh [Kaspersky Lab]1
Trojan.Win32.Cosmu.jmh [Kaspersky Lab]1
Trojan.Win32.Cosmu.jmz [Kaspersky Lab]1
Trojan.Win32.Cosmu.jq [Kaspersky Lab]1
Trojan.Win32.Cosmu.kql [Kaspersky Lab]1
Trojan.Win32.Cosmu.ksc [Kaspersky Lab]1
Trojan.Win32.Cosmu.ls [Kaspersky Lab]1
Trojan.Win32.Cosmu.lvs [Kaspersky Lab]1
Trojan.Win32.Cosmu.lxl [Kaspersky Lab]1
Trojan.Win32.Cosmu.xp [Kaspersky Lab]1
Trojan.Win32.Cosmu.xz [Kaspersky Lab]1
Trojan:Win32/Qhost.BI [Microsoft]1
TrojanDownloader:Win32/Fakeinit [Microsoft]1
Win-Trojan/Cosmu.106496.B [AhnLab]1
Win-Trojan/Cosmu.155731 [AhnLab]1
Win-Trojan/Cosmu.52224.B [AhnLab]1
Win-Trojan/Cosmu.84992.E [AhnLab]1
Win-Trojan/Cosmu.90112.R [AhnLab]1
Win-Trojan/Malware.83456.N [AhnLab]1

Trojan.Win32.Cosmu [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
China2
Spain2
Algeria1
Germany1
Japan1
Republic of Korea1

Trojan.Win32.Cosmu [Ikarus] is known to be created as:
%AllUsersProfile%\menu start\programy\autostart\winlogen.exe
%ProgramFiles%\cdrom\cdrom.exe
%Programs%\startup\explorer.exe
%System%\adimeeaa.dll
%System%\byte.exe
%System%\dllcache\clipsrv.exe
%System%\execl.exe
%System%\netmon.exe
%System%\netsver.exe
%System%\winlogon86.exe
%System%\winupdate86.exe
%Temp%\win.exe
%Windir%\ckey.exe
%Windir%\command.exe
%Windir%\conmand.com
%Windir%\csrss.exe
%Windir%\karpesky.exe
%Windir%\lsass.exe
%Windir%\netmon.exe
%Windir%\services.exe
%Windir%\smss.exe
%Windir%\system\svchost.exe
%Windir%\system32.com
%Windir%\winlogon.exe
%Windir%\winvdll.exe
%Windir%\xcoqy.exe
c:\avg.exe
c:\foto1.exe
c:\system\microsoft software installer\msi.exe
Notes:
  • %AllUsersProfile% is a variable that specifies the all users' profile folder. By default, this is C:\Documents and Settings\All Users (Windows NT/2000/XP).
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Programs% is a variable that refers to the file system directory that contains the user's program groups. A typical path is C:\Documents and Settings\[UserName]\Start Menu\Programs.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.