ThreatExpert's Statistics for Email-Worm.Rays [PC Tools]:

Email-Worm.Rays [PC Tools] is also known as:

Threat Alias	Number of Incidents
W32.Wullik@mm [Symantec]	58
W32/Wukill.worm.gen [McAfee]	57
WORM_WUKILL.GEN [Trend Micro]	54
Email-Worm.Win32.Rays [Kaspersky Lab]	48
W32/Wukill-B [Sophos]	11
Worm:Win32/Wukill.F@mm [Microsoft]	9
Email-Worm.Win32.Rays.c [Kaspersky Lab]	8
Win32/Rays.worm.49152 [AhnLab]	6
Email-Worm.Win32.Rays [Ikarus]	5
Exploit.HTML.Agent.am [Kaspersky Lab]	3
PE_FUNLOVE.4099 [Trend Micro]	2
W32.FunLove.4099 [Symantec]	2
W32/FunLove.gen [McAfee]	2
PE_TENGA.A [Trend Micro]	1
Virus.Win32.Tenga.a [Kaspersky Lab]	1
Virus:Win32/Gael.D [Microsoft]	1
W32/Gael.worm.a [McAfee]	1
W32/Tenga-A [Sophos]	1
Win32/Tenga.3666 [AhnLab]	1
Worm:Win32/Wukill.BG@mm [Microsoft]	1
Worm:Win32/Wukill@mm.gen!A [Microsoft]	1
WORM_WUKILL.AB [Trend Micro]	1
WORM_WUKILL.AH [Trend Micro]	1
WORM_WUKILL.AU [Trend Micro]	1

Email-Worm.Rays [PC Tools] has the following possible country of origin:

Origin		Number of Incidents
	China	39

Email-Worm.Rays [PC Tools] is known to be created as:

%System%\enu.exe.exe

%System%\movies.exe.exe

%System%\song.exe.exe

%System%\winfile.exe.exe

%Windir%\mstray.exe

Notes:

%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.