Threat Search: 

ThreatExpert's Statistics for TrojanSpy:Win32/Agent [Microsoft]:

TrojanSpy:Win32/Agent [Microsoft] is also known as:
Threat AliasNumber of Incidents
Generic PWS [McAfee]105
Trojan-Spy.Win32.Agent.qj [Kaspersky Lab]92
Win-Trojan/Agent.41984.KC [AhnLab]72
Trojan.Win32.Agent.cccr [Kaspersky Lab]70
TSPY_AGENT.AAIJ [Trend Micro]56
Trojan-PWS.Win32.Agent [Ikarus]53
Spy-Agent.ef [McAfee]50
W32.Xema.A [Symantec]50
Troj/Agent-FXF [Sophos]49
TrojanSpy.Agent.JMM [PC Tools]49
Mal/Generic-E [Sophos]40
Trojan-Spy.Win32.Agent.qj [Ikarus]36
TrojanSpy.Agent.DGZS [PC Tools]35
Infostealer [Symantec]32
Troj/Spy-ED [Sophos]23
Trojan Horse [Symantec]22
Win-Trojan/Xema.variant [AhnLab]22
Bloodhound.Unknown [Symantec]14
Generic Dropper.ny [McAfee]14
Trojan-Spy.Agent!sd6 [PC Tools]14
Generic.dx [McAfee]12
Generic.dt [McAfee]10
Generic PWS.y [McAfee]8
Trojan.PWS.Steam.AF [PC Tools]8
Trojan-PSW.Win32.Agent.tr [Kaspersky Lab]8
Mal/Generic-A [Sophos]7
Troj/PWS-APY [Sophos]7
Trojan.PWS.Agent.EDFA [PC Tools]7
Trojan-PWS.Win32.Agent.tr [Ikarus]7
TSPY_AGENT.BJ [Trend Micro]7
Trojan.Generic [PC Tools]6
Trojan.Banker [PC Tools]5
Infostealer.Bancos [Symantec]4
PWS-Banker.gen.i [McAfee]4
Troj/Mesoto-D [Sophos]4
Troj/Steam-AH [Sophos]4
Trojan-Banker.Win32.Banker.bix [Kaspersky Lab]4
Trojan-PSW.Win32.Steam.bx [Kaspersky Lab]4
Trojan-PSW.Win32.Steam.f [Kaspersky Lab]4
Trojan-PWS.ChromeInject [Ikarus]4
Win-Trojan/Agent.24576.GS [AhnLab]4
Win-Trojan/Agent.296448 [AhnLab]4
Downloader [Symantec]3
Infostealer.Lineage [Symantec]3
Trojan.Chromeinject.A [Symantec]3
Trojan-Spy.Agent [PC Tools]3
Virus.Win32.Trojan [Ikarus]3
Worm.Win32.Downloader.am [Ikarus]3
Hacktool.PassReminder [Symantec]2
Mal/Behav-236 [Sophos]2
not-a-virus:PSWTool.Win32.Messen.106 [Kaspersky Lab]2
Troj/Cimga-G [Sophos]2
Troj/ZbotPP-Fam [Sophos]2
TROJ_PROSTOR.AA [Trend Micro]2
Trojan.Keylog [Ikarus]2
Trojan-PSW.Win32.Prostor.h [Kaspersky Lab]2
Trojan-PSW.Win32.Staem.bx [Kaspersky Lab]2
Trojan-PWS.Steam [Ikarus]2
Trojan-Spy.Win32.Agent [Ikarus]2
Trojan-Spy.Win32.Agent.rc [Kaspersky Lab]2
W32/Autorun.worm.bh [McAfee]2
Backdoor.Mutny [Symantec]1
Backdoor.Trojan [Symantec]1
Backdoor.Win32.Haxdoor [Ikarus]1
BackDoor-BAC.dll [McAfee]1
BackDoor-CEP.gen.n [McAfee]1
BKDR_BAC.DLL [Trend Micro]1
Generic Downloader.x!hz [McAfee]1
Generic Malware.jb [McAfee]1
Generic PWS.y!p [McAfee]1
Generic.dh [McAfee]1
Generic.dl [McAfee]1
Generic.eo [McAfee]1
Generic.PWS.Games [Ikarus]1
Infostealer.Bancos!gen [Symantec]1
Infostealer.Banpaes [Symantec]1
Infostealer.Gampass [Symantec]1
Infostealer.Lemir.Gen [Symantec]1
Mal/VB-P [Sophos]1
Mal_Infostl [Trend Micro]1
New Malware.aj [McAfee]1
not-a-virus:PSWTool.Win32.Messen.106 [Ikarus]1
PWS-JA [McAfee]1
Spy-Agent.bw.gen.i [McAfee]1
Troj/Bancos-BEX [Sophos]1
Troj/Haxdor-Fam [Sophos]1
Troj/MMThief-G [Sophos]1
Troj/PSW-GT [Sophos]1
TROJ_DOWNLOAD.E [Trend Micro]1
TROJ_MALRD4.A [Trend Micro]1
Trojan.Agent.ROF [PC Tools]1
Trojan.Crypt [Ikarus]1
Trojan.PWS.QQPass [Symantec]1
Trojan.Win32.Agent [Ikarus]1
Trojan.Win32.Agent.add [Kaspersky Lab]1
Trojan.Win32.Agent.ckeq [Kaspersky Lab]1
Trojan.Win32.Agent.mrb [Kaspersky Lab]1
Trojan.Win32.Antavmu.chb [Kaspersky Lab]1
Trojan.Win32.Buzus.bnia [Kaspersky Lab]1
Trojan-Banker.Win32.Banker [Ikarus]1

TrojanSpy:Win32/Agent [Microsoft] has the following possible countries of origin:
OriginNumber of Incidents
China12
Brazil4
Germany2
Israel2
Romania1
United Kingdom1

TrojanSpy:Win32/Agent [Microsoft] is known to be created as:
%ProgramFiles%\windo\win.exe
%System%\cm.dll
%System%\draw32.dll
%System%\kbdqib.dll
%System%\msipfilter.dll
%System%\msxml32.dll
%System%\ntdll32.dll
%System%\passstealerv3_2.exe
%System%\shell64.dll
%System%\svch0st.exe
%System%\syscatgui.exe
%System%\twex.exe
%Temp%\1.tmp\omg.exe
%Temp%\2.exe
%Temp%\451704.exe
%Temp%\crack.exe
%Temp%\crypted.exe
%Temp%\decrypted.exe
%Temp%\explorer.exe
%Temp%\gliderdeploy.exe
%Temp%\istealer 4.0\iloader.exe
%Temp%\proexa3.exe
%Temp%\scvhost.exe
%Temp%\server.exe
%Temp%\test.exe
%Temp%\tmp.exe
%Windir%\mshaxxx6.exe
%Windir%\system\spiservice.dll
%Windir%\system\winservice.dll
c:\0jpz.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.