Threat Search: 

ThreatExpert's Statistics for Win-Trojan/Prorat.349228.O [AhnLab]:

Win-Trojan/Prorat.349228.O [AhnLab] is also known as:
Threat AliasNumber of Incidents
Backdoor.Prorat [Symantec]6
Backdoor.Win32.Prorat.dz [Kaspersky Lab]6
Backdoor:Win32/Prorat.K [Microsoft]6
BackDoor-AVW [McAfee]6
BKDR_PRORAT.BL [Trend Micro]6
Backdoor.Prorat.AX [PC Tools]4
Virus.Win32.Prorat.AW [Ikarus]4
Mal/Prorat-B, Troj/Prorat-Fam [Sophos]3
Mal/Generic-E, Mal/Behav-004, Mal/Prorat-B, Troj/Prorat-Fam [Sophos]2
Virus.Win32.Prorat [Ikarus]2
Backdoor.ProRat [PC Tools]1
Mal/Behav-004, Mal/Prorat-B, Troj/Prorat-Fam [Sophos]1

Win-Trojan/Prorat.349228.O [AhnLab] is known to be created as:
%System%\fservice.exe
%System%\lncom.exe
%Windir%\services.exe
%Windir%\system\sservice.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.