Threat Search: 

ThreatExpert's Statistics for W32/Kolab [McAfee]:

W32/Kolab [McAfee] is also known as:
Threat AliasNumber of Incidents
W32.Spybot.Worm [Symantec]7
Net-Worm.Spybot [PC Tools]5
W32/Kolab-D [Sophos]5
Net-Worm.Win32.Kolab [Ikarus]4
Trojan.Win32.Buzus [Ikarus]4
Mal/Generic-A, Mal/Packer [Sophos]3
Backdoor.IRC [PC Tools]2
Backdoor.IRC.Bot [Symantec]2
Net-Worm.Win32.Kolabc [Ikarus]2
Backdoor.IRCBot!sd6 [PC Tools]1
Mal/Generic-A [Sophos]1
Net-Worm.SillyFDC [PC Tools]1
Net-Worm.Win32.Kolab.dgn [Kaspersky Lab]1
Net-Worm.Win32.Kolab.dlo [Kaspersky Lab]1
Net-Worm.Win32.Kolab.ecx [Kaspersky Lab]1
Net-Worm.Win32.Kolab.eff [Kaspersky Lab]1
Net-Worm.Win32.Kolab.ehp [Kaspersky Lab]1
Net-Worm.Win32.Kolab.eih [Kaspersky Lab]1
Net-Worm.Win32.Kolab.eil [Kaspersky Lab]1
Net-Worm.Win32.Kolab.fem [Kaspersky Lab]1
Net-Worm.Win32.Kolab.fkt [Kaspersky Lab]1
Net-Worm.Win32.Kolabc.gpe [Kaspersky Lab]1
Net-Worm.Win32.Kolabc.hki [Kaspersky Lab]1
Troj/Agent-KXN [Sophos]1
Troj/Agent-MFV [Sophos]1
Trojan.IRCBot [PC Tools]1
Trojan-Dropper.TDY [Ikarus]1
VirTool:Win32/Injector.gen!AD [Microsoft]1
W32.IRCBot [Symantec]1
W32.SillyFDC [Symantec]1
Win32/Kolab.worm.131072.I [AhnLab]1
Win32/Kolab.worm.141454.B [AhnLab]1
Win32/Kolab.worm.147456.H [AhnLab]1
Win32/Kolab.worm.81920.F [AhnLab]1
Win32/Kolab.worm.81920.G [AhnLab]1
Win32/Kolab.worm.81920.I [AhnLab]1
Win32/Kolab.worm.81920.L [AhnLab]1
Win32/Kolab.worm.81920.M [AhnLab]1
Win32/Kolabc.worm.141454.N [AhnLab]1
Win32/Kolabc.worm.141454.P [AhnLab]1
Worm:Win32/Pushbot.gen!C [Microsoft]1
Worm:Win32/Pushbot.OE [Microsoft]1
Worm:Win32/Pushbot.OF [Microsoft]1
Worm:Win32/Pushbot.OJ [Microsoft]1
Worm:Win32/Pushbot.OM [Microsoft]1
Worm:Win32/Pushbot.OW [Microsoft]1
Worm:Win32/Pushbot.OZ [Microsoft]1

W32/Kolab [McAfee] is known to be created as:
%FontsDir%\unwise_.exe
%System%\drivers\bcb.exe
%System%\drivers\bslbt.exe
%System%\drivers\bsmbt.exe
%System%\drivers\bsobt.exe
%System%\drivers\csgf.exe
%Windir%\jjdrive32.exe
Notes:
  • %FontsDir% is a variable that refers to a virtual folder containing fonts. A typical path is C:\Windows\Fonts.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.