Threat Search: 

ThreatExpert's Statistics for Win-Trojan/Turkojan.307712 [AhnLab]:

Win-Trojan/Turkojan.307712 [AhnLab] is also known as:
Threat AliasNumber of Incidents
Troj/Agent-GMF [Sophos]47
Backdoor.Win32.Turkojan.r [Kaspersky Lab]45
BackDoor-CZP.dr [McAfee]41
W32.IRCBot.Gen [Symantec]39
Backdoor:Win32/Turkojan.AI [Microsoft]31
Backdoor.Turkojan.il [PC Tools]22
Trojan-Dropper.Delf [Ikarus]18
Trojan.IRCBot [PC Tools]14
Downloader.Delphi [Ikarus]11
BackDoor-CZP.dr.gen.a [McAfee]5
Backdoor.Turkojan.Gen [PC Tools]3
VirTool:Win32/DelfInject.gen!L [Microsoft]2
Backdoor:Win32/Turkojan.gen!A [Microsoft]1
TrojanSpy:Win32/Turkahn.A [Microsoft]1

Win-Trojan/Turkojan.307712 [AhnLab] is known to be created as:
%System%\guezzoun.scr
%Temp%\server.exe
%Windir%\hamoode.exe
%Windir%\kasper.exe
%Windir%\msstwain32.exe
%Windir%\mstwain32.exe
c:\111111111111.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.