ThreatExpert's Statistics for TrojanDownloader:Win32/Renos.BAH [Microsoft]:

TrojanDownloader:Win32/Renos.BAH [Microsoft] is also known as:

Threat Alias	Number of Incidents
Generic Downloader.x [McAfee]	41
Downloader [Symantec]	38
Trojan-Downloader.Win32.CodecPack [Ikarus]	34
Trojan-Dropper.Agent [Ikarus]	11
Downloader.MisleadApp [Symantec]	9
Trojan.Zlob [Symantec]	7
Generic Downloader.ac [McAfee]	6
Possible_DLDER [Trend Micro]	6
Puper [McAfee]	6
Trojan-Downloader.Win32.Renos [Ikarus]	6
Trojan.Fakeavalert [Symantec]	5
Trojan-Downloader.Win32.Agent.aopv [Kaspersky Lab]	5
Trojan-Downloader.Win32.CodecPack.aac [Kaspersky Lab]	5
Trojan-Downloader.Win32.Renos.BA [Ikarus]	4
Troj/FakeVir-KL [Sophos]	3
Trojan Horse [Symantec]	3
Trojan.Zlob [Ikarus]	3
Trojan-Downloader.Win32.Agent.bhzq [Kaspersky Lab]	3
Trojan-Dropper.Win32.Agent.agsb [Kaspersky Lab]	3
Downloader.Trojan [Symantec]	2
Generic Downloader.ab [McAfee]	2
Mal/Generic-A [Sophos]	2
Troj/Dloadr-CAB [Sophos]	2
Trojan.Win32.Monder.yrv [Kaspersky Lab]	2
Trojan.Zlob!sd6 [PC Tools]	2
Trojan-Downloader.Win32.Agent.aoyi [Kaspersky Lab]	2
Trojan-Downloader.Win32.Agent.apqe [Kaspersky Lab]	2
Trojan-Downloader.Win32.Agent.atam [Kaspersky Lab]	2
Trojan-Downloader.Win32.CodecPack.aak [Kaspersky Lab]	2
Trojan-Downloader.Win32.CodecPack.aar [Kaspersky Lab]	2
Trojan-Downloader.Win32.CodecPack.ae [Kaspersky Lab]	2
Trojan-Downloader.Win32.CodecPack.aej [Kaspersky Lab]	2
Trojan-Downloader.Win32.CodecPack.agz [Kaspersky Lab]	2
Trojan-Downloader.Win32.CodecPack.ajt [Kaspersky Lab]	2
Trojan-Downloader.Win32.CodecPack.ax [Kaspersky Lab]	2
Trojan-Downloader.Win32.CodecPack.dc [Kaspersky Lab]	2
Trojan-Downloader.Win32.FraudLoad [Ikarus]	2
Trojan-Downloader.Win32.Renos.AY [Ikarus]	2
Trojan-Dropper.Win32.Agent.agtl [Kaspersky Lab]	2
Mal/EncPk-HJ [Sophos]	1
Troj/Agent-HSN [Sophos]	1
Troj/Agent-HXH [Sophos]	1
Troj/Agent-INT [Sophos]	1
Troj/Dload-FH [Sophos]	1
Troj/Dloadr-BVW [Sophos]	1
Troj/Dloadr-BYS [Sophos]	1
Troj/Dloadr-CBH [Sophos]	1
Troj/DwnLdr-HJM [Sophos]	1
Troj/DwnLdr-HKG [Sophos]	1
Trojan.FakeAlert [PC Tools]	1
Trojan.Fakeavalert!sd6 [PC Tools]	1
Trojan.Fakeavalert.B [Symantec]	1
Trojan.Win32.Agent.arpa [Kaspersky Lab]	1
Trojan.Win32.FraudPack.arn [Kaspersky Lab]	1
Trojan-Downloader [Ikarus]	1
Trojan-Downloader.Agent!sd6 [PC Tools]	1
Trojan-Downloader.JKYN [Ikarus]	1
Trojan-Downloader.Win32.Agent.ahmc [Kaspersky Lab]	1
Trojan-Downloader.Win32.Agent.ahym [Kaspersky Lab]	1
Trojan-Downloader.Win32.Agent.anar [Kaspersky Lab]	1
Trojan-Downloader.Win32.Agent.anoz [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.aab [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.aaf [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.bb [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.ca [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.cf [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.cr [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.gj [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.s [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.vj [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.wy [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.xo [Kaspersky Lab]	1
Trojan-Downloader.Win32.CodecPack.xu [Kaspersky Lab]	1
Trojan-Downloader.Win32.FraudLoad.vcno [Kaspersky Lab]	1
Trojan-Downloader.Win32.FraudLoad.vcoy [Kaspersky Lab]	1
Trojan-Downloader.Win32.FraudLoad.vcpp [Kaspersky Lab]	1
Trojan-Downloader.Win32.Small.aeod [Kaspersky Lab]	1
Trojan-Downloader.Win32.Zlob.zsa [Kaspersky Lab]	1
Trojan-Dropper.Win32.Agent.yql [Kaspersky Lab]	1
Win32.SuspectCrc [Ikarus]	1
Win-Trojan/Codecpack.40448 [AhnLab]	1
Win-Trojan/Fraudpack.46592.B [AhnLab]	1
Win-Trojan/Zlob.51200.AV [AhnLab]	1

TrojanDownloader:Win32/Renos.BAH [Microsoft] has the following possible country of origin:

Origin		Number of Incidents
	Russian Federation	23

TrojanDownloader:Win32/Renos.BAH [Microsoft] is known to be created as:

%Temp%\systeminit.exe

Note: %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).