Threat Search: 

ThreatExpert's Statistics for Trojan.Win32.Malagent [Ikarus]:

Trojan.Win32.Malagent [Ikarus] is also known as:
Threat AliasNumber of Incidents
Backdoor.Trojan [Symantec]12
Backdoor.Win32.Poison.cww [Kaspersky Lab]9
Generic BackDoor [McAfee]8
Win-Trojan/Poison.619538 [AhnLab]6
Trojan:Win32/Malagent [Microsoft]5
Backdoor.Poison!sd6 [PC Tools]4
Trojan Horse [Symantec]4
W32.Blune [Symantec]4
Backdoor.Win32.Poison.qo [Kaspersky Lab]3
Virus.Win32.Virut.ce [Kaspersky Lab]3
W32/Scribble-B [Sophos]3
W32/Virut.n.gen [McAfee]3
Win32/Virut.F [AhnLab]3
Backdoor.Win32.Poison.aem [Kaspersky Lab]2
Mal/Generic-A [Sophos]2
Backdoor.Win32.Poison.acdt [Kaspersky Lab]1
Backdoor:Win32/Poisonivy.I [Microsoft]1
Downloader-BRW [McAfee]1
Generic VB.c [McAfee]1
Mal/EncPk-BU, Mal/Packer, Mal/EncPk-BA [Sophos]1
Mal/EncPk-GT [Sophos]1
Mal/EncPk-IY [Sophos]1
Mal/SillyFDC-A, Mal/Emogen-H [Sophos]1
New Malware.bl [McAfee]1
Packed.Generic.52 [Symantec]1
Packed.Win32.Krap.y [Kaspersky Lab]1
PE_RUNGBU.B [Trend Micro]1
PE_RUNGBU.C [Trend Micro]1
PE_RUNGBU.E [Trend Micro]1
PE_SALITY.AE [Trend Micro]1
PE_VIRUX.E-2 [Trend Micro]1
PE_VIRUX.H-3 [Trend Micro]1
PWS-Banker.gen.b [McAfee]1
Virus.Win32.Sality.l [Kaspersky Lab]1
Virus.Win32.VB.bp [Kaspersky Lab]1
Virus.Win32.VB.cc [Kaspersky Lab]1
Virus:Win32/Rungbu.C [Microsoft]1
Virus:Win32/Sality.G [Microsoft]1
Virus:Win32/VB.BP [Microsoft]1
Virus:Win32/Virut.BM [Microsoft]1
W32.Dizan.D [Symantec]1
W32.HLLP.Sality.O [Symantec]1
W32.Rungbu [Symantec]1
W32.SillyFDC [Symantec]1
W32.Virut.CF [Symantec]1
W32/Generic.e [McAfee]1
W32/Rungbu-B [Sophos]1
W32/Rungbu-C [Sophos]1
W32/Sality.n [McAfee]1
W32/Sality-AI [Sophos]1
W32/VB-CTQ [Sophos]1
Win32.Sality.L [PC Tools]1
Win32/Xema.worm.76288.B [AhnLab]1
Win-Trojan/MalCrypted.Gen [AhnLab]1
Win-Trojan/Poison.679424 [AhnLab]1
Win-Trojan/Poison.686592 [AhnLab]1
Worm.AutoRun!sd6 [PC Tools]1
Worm.Rungbu.B [PC Tools]1
Worm.VB.YVF [PC Tools]1
Worm.Win32.AutoRun.fr [Kaspersky Lab]1
Worm.Win32.VB.du [Kaspersky Lab]1

Trojan.Win32.Malagent [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
Brazil5
Russian Federation3
China2
France2
Germany2
Netherlands1
Saudi Arabia1
Sweden1

Trojan.Win32.Malagent [Ikarus] is known to be created as:
%DownloadedProgramFiles%\philconst.exe
%ProgramFiles%\common files\system\winlogon.exe
%ProgramFiles%\philconst.exe
%System%\explorer.dll
%Windir%\diagnose.exe
%Windir%\inf\services.exe
%Windir%\lsass.exe
%Windir%\msword.exe
%Windir%\msword.scr
%Windir%\setup\dllhost.com
%Windir%\setup\dllhost.scr
%Windir%\systen32\svchost.exe
Notes:
  • %DownloadedProgramFiles% is a variable that refers to the file system directory containing downloaded program files. A typical path is C:\Windows\Downloaded Program Files.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.