Threat Search: 

ThreatExpert's Statistics for W32/Koobface.worm [McAfee]:

W32/Koobface.worm [McAfee] is also known as:
Threat AliasNumber of Incidents
Worm:Win32/Koobface.gen!D [Microsoft]88
W32.Koobface.D [Symantec]82
Worm.Win32.Koobface [Ikarus]49
Mal/KoobHeur-A [Sophos]33
Net-Worm.Win32.Koobface.bjq [Kaspersky Lab]26
W32/Koobfa-Gen, Mal/KoobHeur-A [Sophos]26
Net-Worm.Win32.Koobface.bka [Kaspersky Lab]25
Net-Worm.Win32.Koobface.bkb [Kaspersky Lab]25
Mal/Generic-A [Sophos]23
W32.Koobface.A [Symantec]15
Net-Worm.Koobface [PC Tools]10
Mal/Generic-A, Mal/KoobHeur-A [Sophos]9
Net-Worm.Win32.Koobface [Ikarus]9
W32/Koobfa-Gen [Sophos]8
Win32/Koobface.worm.36864.H [AhnLab]6
Downloader [Symantec]5
Net-Worm.Koobface!sd6 [PC Tools]5
Net-Worm.Koobface.bjq [PC Tools]5
WORM_KOOBFACE.E [Trend Micro]5
Net-Worm.Win32.Koobface.k [Kaspersky Lab]4
Net-Worm.Win32.Koobface.cuf [Kaspersky Lab]3
Trojan.Win32.Agent [Ikarus]3
W32.Koobface!gen1 [Symantec]3
Mal/Heuri-E, Mal/Heuri-D, Mal/Emogen-N [Sophos]2
Trojan.Win32.Scar [Ikarus]2
Trojan.Win32.Scar.eh [Kaspersky Lab]2
Trojan-Downloader.Win32.Alphabet [Ikarus]2
Trojan-Downloader.Win32.Injecter.dix [Kaspersky Lab]2
W32.Koobface.B [Symantec]2
Win32.Worm.Koobface [Ikarus]2
Worm:Win32/Koobface.W [Microsoft]2
Backdoor.Win32.Agent.udx [Kaspersky Lab]1
Dropper/Agent.11776.S [AhnLab]1
Net-Worm.Koobface.bjj [PC Tools]1
Net-Worm.Koobface.za [PC Tools]1
Net-Worm.Win32.Koobface.ac [Kaspersky Lab]1
Net-Worm.Win32.Koobface.b [Kaspersky Lab]1
Net-Worm.Win32.Koobface.bjj [Kaspersky Lab]1
Net-Worm.Win32.Koobface.bod [Kaspersky Lab]1
Net-Worm.Win32.Koobface.bqn [Kaspersky Lab]1
Net-Worm.Win32.Koobface.bu [Kaspersky Lab]1
Net-Worm.Win32.Koobface.e [Kaspersky Lab]1
Troj/Agent-HNS [Sophos]1
Troj/Agent-IGE [Sophos]1
Troj/Dloadr-BPL [Sophos]1
TROJ_BUZUS.KF [Trend Micro]1
Trojan.Agent!sd6 [PC Tools]1
Trojan.Win32.Agent.atff [Kaspersky Lab]1
Trojan.Win32.Agent.btvl [Kaspersky Lab]1
Trojan.Win32.Agent2.eqz [Kaspersky Lab]1
Trojan.Win32.Buzus [Ikarus]1
Trojan.Win32.Buzus.rmj [Kaspersky Lab]1
Trojan.Win32.Small [Ikarus]1
Trojan.Win32.Small.abay [Kaspersky Lab]1
Trojan.Win32.Small.cbw [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.atbf [Kaspersky Lab]1
Trojan-Downloader.Win32.Delf.lre [Kaspersky Lab]1
Trojan-Proxy.Win32.Small [Ikarus]1
Virus.Win32.Agent [Ikarus]1
W32/Koobface-M [Sophos]1
W32/Koobfa-Gen, W32/Koobfa-Gen [Sophos]1
W32/Koobfa-L [Sophos]1
Win32/Koobface.worm.20992.B [AhnLab]1
Win32/Koobface.worm.27136 [AhnLab]1
Win32/Koobface.worm.32768.AA [AhnLab]1
Win32/Koobface.worm.32768.AD [AhnLab]1
Win32/Koobface.worm.32768.AE [AhnLab]1
Win32/Koobface.worm.32768.AG [AhnLab]1
Win32/Koobface.worm.53248.O [AhnLab]1
Win32/Koobface.worm.65536.F [AhnLab]1
Win32/Koobface.worm.73728.J [AhnLab]1
Win-Trojan/Swizzor.40960 [AhnLab]1
Worm:Win32/Koobface.A [Microsoft]1
Worm:Win32/Koobface.C [Microsoft]1
Worm:Win32/Koobface.gen!A [Microsoft]1
Worm:Win32/Koobface.I [Microsoft]1

W32/Koobface.worm [McAfee] has the following possible countries of origin:
OriginNumber of Incidents
Finland3
Canada2

W32/Koobface.worm [McAfee] is known to be created as:
%Temp%\ld12.exe
%Temp%\net-worm.win32.koobface.k.exe
%Temp%\pp11.exe
%Windir%\bolivar22.exe
%Windir%\bolivar25.exe
%Windir%\bolivar28.exe
%Windir%\fbtre8.exe
%Windir%\freddy58.exe
%Windir%\freddy59.exe
%Windir%\freddy64.exe
%Windir%\kenny11.exe
%Windir%\ld01.exe
%Windir%\ld12.exe
%Windir%\ld14.exe
%Windir%\ld16.exe
%Windir%\pp11.exe
%Windir%\pp2.exe
Notes:
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.