ThreatExpert's Statistics for Trojan:Win32/Refpron.F [Microsoft]:

Trojan:Win32/Refpron.F [Microsoft] is also known as:

Threat Alias Number of Incidents Mal/Generic-A [Sophos] 74 Packed.Win32.Koblu.d [Kaspersky Lab] 42 Trojan.Win32.Koblu.bkt [Kaspersky Lab] 12 Trojan.Win32.Delf.pep [Kaspersky Lab] 4 Trojan.Win32.Refpron [Ikarus] 2 Backdoor.Win32.Delf.ryb [Kaspersky Lab] 1 Downloader [Symantec] 1 Generic Downloader.x!hz [McAfee] 1 Troj/Dcaei-Gen [Sophos] 1 Trojan Horse [Symantec] 1 Trojan.Agent [Ikarus] 1 Trojan.Generic [PC Tools] 1 Trojan.Win32.Koblu.bcn [Kaspersky Lab] 1 Trojan.Win32.Koblu.i [Kaspersky Lab] 1 Win-Trojan/Fraudload.51200.M [AhnLab] 1 Win-Trojan/Koblu.45568.AE [AhnLab] 1

Trojan:Win32/Refpron.F [Microsoft] has the following possible country of origin:

Origin Number of Incidents China 72

Trojan:Win32/Refpron.F [Microsoft] is known to be created as:

%System%\btwsrv.dll %System%\evdoserver.dll

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).