ThreatExpert's Statistics for Hoax.Win32.Renos.vbrl [Kaspersky Lab]:

Hoax.Win32.Renos.vbrl [Kaspersky Lab] is also known as:

Threat Alias	Number of Incidents
Generic Downloader.x [McAfee]	4
Mal/Padodor-B [Sophos]	4
Trojan.Fakeavalert [Symantec]	4
Trojan-Downloader.Win32.Renos [Ikarus]	4
TrojanDownloader:Win32/Renos [Microsoft]	2

Hoax.Win32.Renos.vbrl [Kaspersky Lab] is known to be created as:

%Temp%\wndutl32.dll

Note: %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).