Lavasoft Malware Labs Blog
Malware Encyclopedia
Gen:Variant.Symmi.27799 (BitDefender), VirTool:Win32/CeeInject.gen!HL (Microsoft), HEUR:Trojan.Win32.Generic (Kaspersky), Trojan.Win32.Zbot.akn (v) (VIPRE), Trojan.Winlock.6173 (DrWeb), Gen:Variant.Symmi.27799 (B) (Emsisoft), PWS-Zbot-FBFS!4B3A156F0D18 (McAfee), Virus.Win32.CeeInject (Ikarus), Gen:Variant.Symmi.27799 (FSecure), SHeur4.BLIR (AVG), Win32:Downloader-TRQ [Trj] (Avast), TROJ_GEN.R021C0EKB13 (TrendMicro), Backdoor.Win32.Farfli.FD, Worm.Win32.Dorkbot.FD, WormDorkbot.YR, GenericUDPFlooder.YR, GenericIRCBot.YR, GenericMSNWorm.YR, GenericUSBInfector.YR, GenericDNSBlocker.YR, GenericAutorunWorm.YR, GenericSYNFlooder.YR, GenericInjector.YR, BankerGeneric.YR, GenericProxy.YR, GenericPhysicalDrive0.YR (Lavasoft MAS)
Behaviour: Banker, Trojan, Backdoor, Flooder, Worm, Virus, VirTool, WormAutorun, IRCBot, MSNWorm, DNSBlocker, UDPFlooder, SYNFlooder, Trojan-Proxy, USBInfector
Trojan-Downloader.Win32.AdLoad.dyca (Kaspersky), Trojan.Win32.Generic!SB.0 (VIPRE), Trojan.NSIS.StartPage.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan-Downloader, Trojan
Trojan.MSIL.Miner.ky (Kaspersky), Trojan.Win32.Generic!BT (VIPRE), Trojan.Agent4!IK (Emsisoft), PUP.Win32.BitcoinMiner.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan, PUP
Trojan-Dropper.Win32.Injector.ckgg (Kaspersky), Win32.SuspectCrc!IK (Emsisoft), Worm.Win32.Ainslot.VB.FD, GenericAutorunWorm.YR, WormAinslot_VariantOfZeus.YR (Lavasoft MAS)
Behaviour: Trojan-Dropper, Trojan, Worm, WormAutorun
HEUR:Trojan.Win32.Generic (Kaspersky), Worm.Win32.Rorpian.da (v) (VIPRE), Trojan-Ransom.Win32.Birele!IK (Emsisoft), Trojan-PSW.Win32.Zbot.6.FD, Sinowal.YR, GenericInjector.YR, BackdoorCaphaw_QKKBAL.YR, TrojanPSWZbot.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Ransom, Trojan, Backdoor, Worm
HEUR:Trojan.Win32.Generic (Kaspersky), Worm.Win32.Dorkbot (VIPRE), Worm.Win32.Bybz!IK (Emsisoft), Worm.Win32.Dorkbot.FD, WormDorkbot.YR, GenericUDPFlooder.YR, GenericIRCBot.YR, GenericMSNWorm.YR, GenericUSBInfector.YR, GenericDNSBlocker.YR, GenericAutorunWorm.YR, GenericSYNFlooder.YR, GenericInjector.YR, BankerGeneric.YR, GenericProxy.YR, GenericPhysicalDrive0.YR (Lavasoft MAS)
Behaviour: Banker, Trojan, Flooder, Worm, WormAutorun, IRCBot, MSNWorm, DNSBlocker, UDPFlooder, SYNFlooder, Trojan-Proxy, USBInfector
Gen:Variant.Graftor.122099 (BitDefender), HEUR:Trojan.Win32.Generic (Kaspersky), Trojan.Packed.24612 (DrWeb), Gen:Variant.Graftor.122099 (B) (Emsisoft), PWSZbot-FEK!9461EA53DB7C (McAfee), Trojan.Zbot!gen43 (Symantec), Gen:Variant.Graftor.122099 (FSecure), Inject2.GNX (AVG), TSPY_ZBOT.WIF (TrendMicro), Trojan-PSW.Win32.Zbot.6.FD, Sinowal.YR, GenericInjector.YR, BackdoorCaphaw_QKKBAL.YR, TrojanPSWZbot.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan, Backdoor, Packed
Gen:Variant.FAkeAlert.105 (BitDefender), MonitoringTool:Win32/Ardamax (Microsoft), HEUR:Trojan.Win32.Generic (Kaspersky), Trojan.Win32.Ardamax.nbq (v) (VIPRE), Trojan.KeyLogger.20951 (DrWeb), Gen:Variant.FAkeAlert.105 (B) (Emsisoft), Keylog-FAQ!A284A2A182DD (McAfee), Win32.SuspectCrc (Ikarus), Ardamax.BZV (AVG), Win32:Dropper-gen [Drp] (Avast), SpyTool.Win32.Ardamax.FD, GenericEmailWorm.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, EmailWorm, Monitor, SpyTool
Gen:Variant.Kazy.7226 (BitDefender), Backdoor:Win32/Cycbot.B (Microsoft), Trojan.Win32.Pakes.qvc (Kaspersky), BackDoor.Gbot.1646 (DrWeb), Gen:Variant.Kazy.7226 (B) (Emsisoft), BackDoor-EXI.gen.ab (McAfee), Trojan.Gen.2 (Symantec), Virus.Win32.Cryptor (Ikarus), Win32:Cybota [Trj] (Avast), BKDR_CYCBOT.SME3 (TrendMicro), Trojan.Win32.Alureon.FD, Trojan.Win32.Swrort.3.FD, BackdoorCycbot.YR (Lavasoft MAS)
Behaviour: Trojan, Backdoor, Virus
Trojan.Crypt.DW (BitDefender), Virus:Win32/Duel.A@mm (Microsoft), HEUR:Trojan.Win32.Generic (Kaspersky), LooksLike.Win32.Malware!B (v) (VIPRE), Win32.HLLM.Dref (DrWeb), Trojan.Crypt.DW (B) (Emsisoft), Generic-FAGI!5A1101A10868 (McAfee), W32.Mixor (Symantec), Virus.Win32.Heur (Ikarus), Trojan.Crypt.DW (FSecure), Win32/Heur (AVG), Win32:Malware-gen (Avast), TROJ_GEN.F0C2C00KC13 (TrendMicro), Virus.Win32.Duel.FD, GenericEmailWorm.YR, GenericIRCBot.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, EmailWorm, Virus, IRCBot
Gen:Variant.Graftor.121091 (BitDefender), Worm:Win32/Dorkbot.I (Microsoft), HEUR:Trojan.Win32.Generic (Kaspersky), Trojan.Win32.Agent.adgv (v) (VIPRE), BackDoor.IRC.NgrBot.42 (DrWeb), Gen:Variant.Graftor.121091 (B) (Emsisoft), Artemis!F9A4519E02C2 (McAfee), Suspicious.Mystic (Symantec), Trojan.Win32.Loktrom (Ikarus), Gen:Variant.Graftor.121091 (FSecure), Inject.BZVA (AVG), Win32:Vitro (Avast), TROJ_GEN.R021C0DKA13 (TrendMicro), Backdoor.Win32.Farfli.FD, Worm.Win32.Dorkbot.FD, mzpefinder_pcap_file.YR, WormDorkbot.YR, GenericUDPFlooder.YR, GenericIRCBot.YR, GenericMSNWorm.YR, GenericUSBInfector.YR, GenericDNSBlocker.YR, GenericDownloader.YR, GenericAutorunWorm.YR, GenericSYNFlooder.YR, GenericInjector.YR, BankerGeneric.YR, GenericProxy.YR, GenericPhysicalDrive0.YR (Lavasoft MAS)
Behaviour: Banker, Trojan, Backdoor, Flooder, Worm, WormAutorun, IRCBot, MSNWorm, DNSBlocker, UDPFlooder, SYNFlooder, Trojan-Proxy, USBInfector
Trojan-Dropper.Win32.Agent.ivgx (Kaspersky), Trojan.MSIL.Bladabindi.2.FD, Trojan.NSIS.StartPage.FD, Trojan.Win32.Swrort.3.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan-Dropper, Trojan
