Threat Search: 

ThreatExpert's Statistics for W32.Koobface!gen [Symantec]:

W32.Koobface!gen [Symantec] is also known as:
Threat AliasNumber of Incidents
Mal/FakeSpy-A [Sophos]23
Net-Worm.Koobface [PC Tools]14
Net-Worm.Win32.Koobface.cjt [Kaspersky Lab]10
Win-Trojan/Malware.55808.I [AhnLab]9
Net-Worm.Win32.Koobface.cjz [Kaspersky Lab]5
Trojan.Win32.SuspectCRC [Ikarus]5
W32/Koobface.worm.gen.d [McAfee]5
Trojan:Win32/Sisproc [Microsoft]2
Backdoor.Win32.Bredolab.alo [Kaspersky Lab]1
Backdoor.Win32.Buterat [Ikarus]1
Backdoor.Win32.Buterat.am [Kaspersky Lab]1
Generic PWS.y!bdl [McAfee]1
Mal/EncPk-KX [Sophos]1
Mal/Generic-A [Sophos]1
Net-Worm.Win32.Koobface.cjc [Kaspersky Lab]1
Net-Worm.Win32.Koobface.cju [Kaspersky Lab]1
PWS:Win32/Zbot.gen!R [Microsoft]1
Trojan.Packed.Hiloti [Ikarus]1
Trojan.Win32.Assist [Ikarus]1
Trojan.Win32.Assist.np [Kaspersky Lab]1
Trojan.Win32.FraudPack.aacl [Kaspersky Lab]1
Trojan.Win32.Meredrop [Ikarus]1
Trojan:Win32/Meredrop [Microsoft]1
Trojan-Banker.Win32.Bancos [Ikarus]1
Trojan-Banker.Win32.Bancos.ibn [Kaspersky Lab]1
Trojan-Banker.Win32.Bancos.jic [Kaspersky Lab]1
TrojanDownloader:Win32/Bredolab.X [Microsoft]1
Trojan-PSW.Win32.Delf.ekv [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot [Ikarus]1
TSPY_DELF.SMM [Trend Micro]1
W32/Koobface.worm.gen.e [McAfee]1
W32/Koobface.worm.gen.o [McAfee]1
Win-Trojan/Assist.55040 [AhnLab]1
Win-Trojan/Facebook.55552 [AhnLab]1
Win-Trojan/Fraudpack.62720 [AhnLab]1
Win-Trojan/Malware.103680 [AhnLab]1
Win-Trojan/Malware.34560.B [AhnLab]1
Win-Trojan/ZBot.85248 [AhnLab]1
Win-Trojan/ZBot.86272 [AhnLab]1
Worm:Win32/Koobface.N [Microsoft]1

W32.Koobface!gen [Symantec] is known to be created as:
%System%\sdra64.exe
%System%\winagent.exe
%Temp%\zpskon_1257641561.exe
%Windir%\freddy72.exe
%Windir%\freddy73.exe
%Windir%\ld15.exe
%Windir%\pp12.exe
%Windir%\sa23sl.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.