Threat Search: 

ThreatExpert's Statistics for Trojan.Win32.VBKrypt [Ikarus]:

Trojan.Win32.VBKrypt [Ikarus] is also known as:
Threat AliasNumber of Incidents
VirTool:Win32/VBInject.gen!CE [Microsoft]74
Trojan-Spy.Win32.Zbot.abdo [Kaspersky Lab]73
Mal/Generic-A [Sophos]66
Generic.dx!fhi [McAfee]16
Trojan Horse [Symantec]11
Win32/IRCBot.worm.variant [AhnLab]8
Troj/Bckdr-QYZ [Sophos]6
Trojan.Win32.VBKrypt.m [Kaspersky Lab]6
Troj/Bckdr-QYI [Sophos]2
Trojan.Win32.VBKrypt.az [Kaspersky Lab]2
Trojan.Win32.VBKrypt.p [Kaspersky Lab]2
Backdoor.Trojan [PC Tools]1
Backdoor.Trojan [Symantec]1
Generic BackDoor!bcu [McAfee]1
Generic.dx!fgj [McAfee]1
Generic.dx!nkg [McAfee]1
Mal/VBInject-D [Sophos]1
PE_VIRUT.AV [Trend Micro]1
Trojan.Generic [PC Tools]1
Trojan.Win32.VBKrypt.ck [Kaspersky Lab]1
Trojan.Win32.VBKrypt.cn [Kaspersky Lab]1
Trojan.Win32.VBKrypt.t [Kaspersky Lab]1
VirTool:Win32/VBInject.DN [Microsoft]1
VirTool:Win32/VBInject.gen!CI [Microsoft]1
Virus.Win32.Virut.av [Kaspersky Lab]1
W32/Virut.gen.a [McAfee]1
W32/Virut-W [Sophos]1
Win32/Virut.B [AhnLab]1
Win-Trojan/VBInject.266240 [AhnLab]1

Trojan.Win32.VBKrypt [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation1
Spain1

Trojan.Win32.VBKrypt [Ikarus] is known to be created as:
%ProgramFiles%\gpubmq\xqaisysguard.exe
%System%\chosts.exe
%System%\mssrv32.exe
%System%\sdra64.exe
%Temp%\ileede.exe
%Windir%\litmus\hlpme.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.