Threat Search: 

ThreatExpert's Statistics for Virus.Win32.Banker.BOT [Ikarus]:

Virus.Win32.Banker.BOT [Ikarus] is also known as:
Threat AliasNumber of Incidents
Mal/DelpBanc-A [Sophos]4
TrojanSpy:Win32/Bancos.NR [Microsoft]2
Backdoor.Trojan [Symantec]1
Generic.b [McAfee]1
Infostealer.Bancos [Symantec]1
Infostealer.opassmtp [Symantec]1
Mal/Banspy-F [Sophos]1
Mal/Behav-053 [Sophos]1
Mal/TinyDL-T, Mal/Banspy-F [Sophos]1
New Malware [McAfee]1
PWS-Banker [McAfee]1
PWS-Banker!fg [McAfee]1
PWS-Banker.gen.b [McAfee]1
Troj/Arsys [Sophos]1
Trojan Horse [Symantec]1
Trojan-Banker.Win32.Banbra.kvc [Kaspersky Lab]1
Trojan-Banker.Win32.Banker.aerd [Kaspersky Lab]1
Trojan-PSW.Win32.Delf.dmr [Kaspersky Lab]1
Trojan-Spy.Win32.Arsys [Kaspersky Lab]1
TrojanSpy:Win32/Arsys [Microsoft]1
TSPY_ARSYS.A [Trend Micro]1
Win-Trojan/Banker.235008.B [AhnLab]1
Win-Trojan/Banker.507904.I [AhnLab]1

Virus.Win32.Banker.BOT [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
Brazil2
Russian Federation2
Portugal1
Spain1

Virus.Win32.Banker.BOT [Ikarus] is known to be created as:
%System%\flssys.exe
%Windir%\system\shel.exe
%Windir%\system\xsds.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.