Threat Search: 

ThreatExpert's Statistics for VirTool.Win32.DelfInject [Ikarus]:

VirTool.Win32.DelfInject [Ikarus] is also known as:
Threat AliasNumber of Incidents
Backdoor.Graybird [Symantec]211
BackDoor-AWQ.b [McAfee]187
VirTool:Win32/DelfInject.gen!X [Microsoft]158
VirTool:Win32/DelfInject.gen!AC [Microsoft]144
Trojan Horse [Symantec]143
Mal/Generic-A [Sophos]123
Backdoor.Win32.Hupigon.emb [Kaspersky Lab]113
Backdoor:Win32/Hupigon [Microsoft]98
VirTool:Win32/DelfInject.gen!AF [Microsoft]82
Win-Trojan/Xema.variant [AhnLab]72
Backdoor.Hupigon.GEN [PC Tools]68
Troj/GrayBrd-CQ [Sophos]65
BKDR_HUPIGON.GEN [Trend Micro]64
Generic.dx [McAfee]64
Suspicious.MH690 [Symantec]64
Packed.Win32.NSAnti.b [Kaspersky Lab]55
Backdoor.Hupigon.AKGE [PC Tools]54
VirTool:Win32/DelfInject.gen!AA [Microsoft]52
BKDR_HUPIGON.CVT [Trend Micro]48
Backdoor.Trojan [Symantec]47
TROJ_BUZUS.TCC [Trend Micro]46
VirTool:Win32/Injector.gen!D [Microsoft]46
Troj/Agent-HTK [Sophos]44
Mal/Dropper-G [Sophos]43
Backdoor.Hupigon!sd5 [PC Tools]42
Trojan.Win32.Inject.nwq [Kaspersky Lab]36
Troj/Agent-IRM [Sophos]33
W32.IRCBot [Symantec]31
Mal/DSpy-B [Sophos]29
Infostealer [Symantec]27
Win-Trojan/Hupigon.591360.CH [AhnLab]27
VirTool:Win32/DelfInject.gen!AX [Microsoft]26
W32.SillyFDC [Symantec]26
VirTool:Win32/DelfInject.gen!T [Microsoft]25
Mal/Dropper-T [Sophos]24
W32/Autorun.worm.zt [McAfee]23
Trojan.Dropper [Symantec]20
Win32/MalPackedB.suspicious [AhnLab]20
Trojan.Buzus [PC Tools]19
Trojan.Midgare.EYZ [PC Tools]19
Worm.Win32.AutoRun.rye [Kaspersky Lab]18
Generic PUP.x [McAfee]17
Mal/Behav-298 [Sophos]17
VirTool:Win32/DelfInject.gen!N [Microsoft]17
W32/Autorun.worm.gen [McAfee]16
BackDoor-CEP.svr [McAfee]15
Mal/Delf-L [Sophos]15
Trojan.Win32.AntiAV.ql [Kaspersky Lab]15
VirTool:Win32/DelfInject.gen!U [Microsoft]15
W32.SillyDC [Symantec]15
W32.Spybot.Worm [Symantec]15
Downloader [Symantec]14
Mal/EncPK-LL [Sophos]14
VirTool:Win32/DelfInject.gen!W [Microsoft]14
W32/Sdbot.worm [McAfee]14
Backdoor.Win32.Agent.wci [Kaspersky Lab]13
Generic Dropper.bt [McAfee]13
Mal/Dropper-W, Mal/Dropper-G [Sophos]13
W32/Sdbot.worm.gen.ct [McAfee]13
W32/SDBot-DNK [Sophos]13
Backdoor.Win32.Agent.ucr [Kaspersky Lab]12
Spam-Mailbot.l [McAfee]12
Trojan.Win32.AntiAV.sa [Kaspersky Lab]12
VirTool:Win32/DelfInject.gen!L [Microsoft]12
Win-Trojan/Backdoor.88576.B [AhnLab]12
Generic BackDoor [McAfee]11
Mal/Delf-R [Sophos]11
New Malware.ix [McAfee]11
Virus.Win32.Virut.ce [Kaspersky Lab]11
Virus:Win32/Virut.BM [Microsoft]11
W32/Scribble-B [Sophos]11
W32/Virut.gen [McAfee]11
Win32/Virut.F [AhnLab]11
P2P-Worm.Win32.Palevo.kag [Kaspersky Lab]10
Trojan.Win32.Inject.aiti [Kaspersky Lab]10
Trojan:Win32/Midgare.A [Microsoft]10
VirTool:Win32/DelfInject.gen!M [Microsoft]10
Virus.Win32.Virut.n [Kaspersky Lab]10
W32.Pinfi [Symantec]10
Win32/IRCBot.worm.variant [AhnLab]10
Win-Trojan/Buzus.165888.D [AhnLab]10
Win-Trojan/Downloader.62976.X [AhnLab]10
Win-Trojan/Hupigon.698368.D [AhnLab]10
Backdoor.Bifrose [Symantec]9
Generic Dropper [McAfee]9
Mal/Behav-103, Mal/Behav-043, Mal/Dropper-G [Sophos]9
Mal/FakeVirPk-A [Sophos]9
PE_PARITE.A [Trend Micro]9
VirTool:Win32/DelfInject.gen!AW [Microsoft]9
Virus.Win32.Parite.b [Kaspersky Lab]9
Virus:Win32/Virut.AK [Microsoft]9
W32.Virut.B [Symantec]9
Win32.Virut.Gen [PC Tools]9
Win-Trojan/Inject.49152.BB [AhnLab]9
Worm:Win32/Pushbot.gen!C [Microsoft]9
Backdoor.Hupigon.A!ct [PC Tools]8
Generic Dropper.ay [McAfee]8
Mal/DelpSpy-A [Sophos]8
Mal/Stealer-A [Sophos]8
Troj/Poison-M [Sophos]8

VirTool.Win32.DelfInject [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
Brazil50
United Kingdom48
China44
Sweden44
Russian Federation30
Portugal8
Saudi Arabia8
Turkey6
France4
Belgium3
Germany3
Denmark1
Egypt1
Finland1
Indonesia1
Japan1
Pakistan1
South Africa1
Spain1
Switzerland1

VirTool.Win32.DelfInject [Ikarus] is known to be created as:
%AppData%\bifrost\server.exe
%AppData%\boot.exe
%AppData%\cigicigivip32.exe
%AppData%\intranetexplorer.exe
%AppData%\msnser.exe
%AppData%\nvscpapisvr.exe
%AppData%\server.exe
%AppData%\svchost\svchost.exe
%AppData%\svhost.exe
%AppData%\tn_hacker.exe
%AppData%\viruse-scane.exe
%AppData%\win_holper\win_holper.exe
%AppData%\win32.exe
%CommonFavorites%\beos.exe
%ProgramFiles%\1\1.exe
%ProgramFiles%\bifrost 1.2d\server.exe
%ProgramFiles%\bifrost\............exe
%ProgramFiles%\bifrost\defend64bit.exe
%ProgramFiles%\bifrost\girl.exe
%ProgramFiles%\bifrost\server.exe
%ProgramFiles%\bifrost\server1.exe
%ProgramFiles%\boot.exe
%ProgramFiles%\common files\iexplorer.exe
%ProgramFiles%\entvip2008\kavservs.dll
%ProgramFiles%\exchain\exchain.exe
%ProgramFiles%\gnerals\ceral.exe
%ProgramFiles%\hgzserver\g_server2006.dll
%ProgramFiles%\internet\kcv.exe
%ProgramFiles%\java\java.exe
%ProgramFiles%\log\cmd.com
%ProgramFiles%\meteors\svchost.dll
%ProgramFiles%\microsoft common\svchost.exe
%ProgramFiles%\mmms\mmsmms.exe
%ProgramFiles%\no-ip\startup.exe
%ProgramFiles%\opremovba_chs1.exe
%ProgramFiles%\privacy watcher\uninstall.exe
%ProgramFiles%\program files\realshed.exe
%ProgramFiles%\r_server\slsvc.exe
%ProgramFiles%\remote\remote.exe
%ProgramFiles%\server.exe
%ProgramFiles%\server\remote.exe
%ProgramFiles%\spynet.exe
%ProgramFiles%\spy-net\server.exe
%ProgramFiles%\system32\svchost1.exe
%ProgramFiles%\systm\systme.exe
%ProgramFiles%\windir\host.exe
%ProgramFiles%\windows media player\wmsetsdk.dll
%ProgramFiles%\windows\firefox.exe
%ProgramFiles%\winrar\winwww.exe
%System%\1\1.exe
%System%\avgsagui.exe
%System%\avgsysx.exe
%System%\avgwsvcr.exe
%System%\avjcsrvx.exe
%System%\baseesrv.dll
%System%\beyluxe\sutep.exe
%System%\bifrost\b2k.exe
%System%\bifrost\server.exe
%System%\bifrost\svchost.exe
%System%\bndmss.exe
%System%\cilevbw.com
%System%\crss.exe
%System%\ctfmons.exe.exe
%System%\dbuqp.exe
%System%\dllcache\windir32.exe
%System%\doskeys.exe
%System%\drivers\explore.exe
%System%\drivers\smss.exe
%System%\efkqr.exe
%System%\explorer.exe
%System%\iexplore.exe
%System%\ifzrmgn.exe
%System%\instaler.exe
%System%\ipv1.exe
%System%\ipv2.exe
%System%\java01.exe
%System%\javaclp.exe
%System%\javaup1.exe
%System%\jvmi.exe
%System%\kabo\dev-point.exe
%System%\liar6.exe
%System%\love.exe
%System%\lpt.exe
%System%\ly_server2008.dll
%System%\messengerlive.exe
%System%\microsoft\server.exe
%System%\msnbootcf.exe
%System%\msnclicfg.exe
%System%\msnfileshare.exe
%System%\msnmessage7.7.exe
%System%\msnmsgd.exe
%System%\mstcpweb.dll
%System%\nadjib.exe
%System%\nerocheck.dll
%System%\netlibrary.exe
%System%\nex\hak.exe
%System%\nsvcs32.exe
%System%\nte.exe
%System%\ntos.exe
%System%\oidcfpry.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %CommonFavorites% is a variable that refers to the file system directory that serves as a common repository for all users' favorite items. A typical path is C:\Documents and Settings\All Users\Favorites (Windows NT/2000/XP).
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).