Threat Search: 

ThreatExpert's Statistics for W32/Koobface.worm.gen.d [McAfee]:

W32/Koobface.worm.gen.d [McAfee] is also known as:
Threat AliasNumber of Incidents
Trojan.Dropper [Symantec]2,254
VirTool:WinNT/Koobface.gen!D [Microsoft]2,254
W32/KoobFa-N [Sophos]2,254
Worm.Win32.Koobface [Ikarus]2,254
Trojan-Dropper.Win32.Agent.biin [Kaspersky Lab]2,208
Win32/Koobface.worm.92672 [AhnLab]2,024
Trojan.Dropper [PC Tools]1,472
W32/Koobface.worm.gen.r [McAfee]138
Net-Worm.Koobface [PC Tools]10
W32.Koobface!gen [Symantec]5
W32.Koobface.D [Symantec]5
Mal/FakeSpy-A [Sophos]4
Worm:Win32/Koobface.W [Microsoft]4
Net-Worm.Win32.Koobface [Ikarus]3
Mal/EncPk-KX [Sophos]2
Mal/EncPk-LW [Sophos]2
Net-Worm.Win32.Koobface.cmc [Kaspersky Lab]2
Trojan.Win32.Bredolab [Ikarus]2
TrojanDownloader:Win32/Bredolab.X [Microsoft]2
Backdoor.Trojan [PC Tools]1
Backdoor.Trojan [Symantec]1
Backdoor.Win32.Bredolab.abk [Kaspersky Lab]1
Backdoor.Win32.Bredolab.agi [Kaspersky Lab]1
Backdoor.Win32.Bredolab.alo [Kaspersky Lab]1
HeurEngine.MaliciousPacker [PC Tools]1
Mal/EncPk-KV [Sophos]1
Mal/EncPk-LC, Mal/EncPk-KX [Sophos]1
Mal/Generic-A [Sophos]1
Mal/Generic-A, Mal/EncPk-KX [Sophos]1
Mal/Generic-A, Mal/EncPk-LW [Sophos]1
Net-Worm.Win32.Koobface.ccl [Kaspersky Lab]1
Net-Worm.Win32.Koobface.cqu [Kaspersky Lab]1
Packed.Generic.257 [Symantec]1
PWS:Win32/Zbot.gen!R [Microsoft]1
Trojan.Bredolab [PC Tools]1
Trojan.Bredolab [Symantec]1
Trojan.Packed.Hiloti [Ikarus]1
Trojan.Win32.Assist.aor [Kaspersky Lab]1
Trojan.Win32.Assist.mk [Kaspersky Lab]1
Trojan.Win32.Assist.np [Kaspersky Lab]1
Trojan.Win32.FraudPack.aacl [Kaspersky Lab]1
Trojan.Win32.Scar.aedd [Kaspersky Lab]1
Trojan:Win32/Sisproc [Microsoft]1
Trojan-Banker.Win32.Bancos.jic [Kaspersky Lab]1
Trojan-PSW.Win32.Delf.ekv [Kaspersky Lab]1
TSPY_DELF.SMM [Trend Micro]1
W32.Koobface.A [Symantec]1
Win32/Koobface.worm.51712 [AhnLab]1
Win32/Koobface.worm.55296 [AhnLab]1
Win32/Kooface.worm.58368 [AhnLab]1
Win-Trojan/Assist.41216.EO [AhnLab]1
Win-Trojan/Assist.53248 [AhnLab]1
Win-Trojan/Assist.55040 [AhnLab]1
Win-Trojan/Bredolab.30208.I [AhnLab]1
Win-Trojan/Bredolab.30720.G [AhnLab]1
Win-Trojan/Fraudpack.62720 [AhnLab]1
Win-Trojan/Malware.103680 [AhnLab]1
Win-Trojan/Scar.60928.D [AhnLab]1
Worm:Win32/Koobface.gen!D [Microsoft]1
Worm:Win32/Koobface.M [Microsoft]1

W32/Koobface.worm.gen.d [McAfee] is known to be created as:
%System%\winagent.exe
%Temp%\update.exe
%Windir%\22601.exe
%Windir%\freddy71.exe
%Windir%\freddy72.exe
%Windir%\freddy75.exe
%Windir%\ld15.exe
%Windir%\rdr_1258596882.exe
%Windir%\rdr_1258596968.exe
%Windir%\rdr_1258679102.exe
%Windir%\rdr_1258679193.exe
%Windir%\rdr_1258845709.exe
%Windir%\rdr_1258845796.exe
%Windir%\rdr_1258927972.exe
%Windir%\rdr_1258928047.exe
%Windir%\rdr_1258962237.exe
%Windir%\rdr_1258962237.exe.exe
%Windir%\rdr_1258995288.exe
%Windir%\rdr_1258995376.exe
%Windir%\rdr_1259008637.exe
%Windir%\rdr_1259008709.exe
%Windir%\rdr_1259113272.exe
%Windir%\rdr_1259113357.exe
%Windir%\rdr_1259136446.exe
%Windir%\rdr_1259136520.exe
%Windir%\rdr_1259136531.exe
%Windir%\rdr_1259166783.exe
%Windir%\rdr_1259166886.exe
%Windir%\rdr_1259172729.exe
%Windir%\rdr_1259172832.exe
%Windir%\rdr_1259233360.exe
%Windir%\rdr_1259233448.exe
%Windir%\rdr_1259269467.exe
%Windir%\rdr_1259269547.exe
%Windir%\rdr_1259311143.exe
%Windir%\rdr_1259311231.exe
%Windir%\rdr_1259356734.exe
%Windir%\rdr_1259356821.exe
%Windir%\rdr_1259465923.exe
%Windir%\rdr_1259465951.exe
%Windir%\rdr_1259465969.exe
%Windir%\rdr_1259465997.exe
%Windir%\rdr_1259466011.exe
%Windir%\rdr_1259466038.exe
%Windir%\rdr_1259466055.exe
%Windir%\rdr_1259466097.exe
%Windir%\rdr_1259595070.exe
%Windir%\rdr_1259595150.exe
%Windir%\rdr_1259621474.exe
%Windir%\rdr_1259621558.exe
%Windir%\rdr_1259621573.exe
%Windir%\rdr_1259622945.exe
%Windir%\rdr_1259623031.exe
%Windir%\rdr_1259679371.exe
%Windir%\rdr_1259679458.exe
%Windir%\rdr_1259711924.exe
%Windir%\rdr_1259712010.exe
%Windir%\rdr_1259718475.exe
%Windir%\rdr_1259718567.exe
%Windir%\rdr_1259729075.exe
%Windir%\rdr_1259729158.exe
%Windir%\rdr_1259899742.exe
%Windir%\rdr_1259899834.exe
%Windir%\rdr_1259911177.exe
%Windir%\rdr_1259911265.exe
%Windir%\rdr_1260268048.exe
%Windir%\rdr_1260444750.exe
%Windir%\rdr_1260444787.exe
%Windir%\rdr_1260444883.exe
%Windir%\rdr_1260518762.exe
%Windir%\rdr_1260518779.exe
%Windir%\rdr_1260518781.exe
%Windir%\rdr_1260518814.exe
%Windir%\rdr_1260518851.exe
%Windir%\rdr_1260518869.exe
%Windir%\rdr_1260518882.exe
%Windir%\rdr_1260518882.exe.exe
%Windir%\rdr_1260518886.exe
%Windir%\rdr_1260518900.exe
%Windir%\rdr_1260525059.exe
%Windir%\rdr_1260525088.exe
%Windir%\rdr_1260525160.exe
%Windir%\rdr_1260574500.exe
%Windir%\rdr_1260604167.exe
%Windir%\rdr_1260604270.exe
%Windir%\rdr_1260635519.exe
%Windir%\rdr_1260635601.exe
%Windir%\rdr_1260636099.exe
%Windir%\rdr_1260741674.exe
%Windir%\rdr_1260741758.exe
%Windir%\rdr_1261400107.exe
%Windir%\rdr_1261953952.exe
%Windir%\rdr_1261953952.exe.exe
%Windir%\rdr_1261953952.exe.exe.exe
%Windir%\rdr_1261953966.exe
%Windir%\rdr_1262884657.exe
%Windir%\rdr_1263301491.exe
%Windir%\rdr_1263301576.exe
%Windir%\rdr_1263302682.exe
%Windir%\rdr_1263302682.exe.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.