ThreatExpert's Statistics for Mal/RootKit-C [Sophos]:

Mal/RootKit-C [Sophos] is also known as:

Threat Alias Number of Incidents Spammer:WinNT/Srizbi.A [Microsoft] 43 Cryp_Xed-3 [Trend Micro] 32 Trojan.Srizbi [Symantec] 31 Generic.dx [McAfee] 21 Trojan.Srizbi!sd6 [PC Tools] 15 Hacktool.Rootkit [Symantec] 14 Rootkit.Win32.Agent.ctm [Kaspersky Lab] 12 Rootkit.Win32.Qandr.do [Kaspersky Lab] 12 Rootkit.Win32.Qandr [Ikarus] 11 TROJ_SRIZBI.BA [Trend Micro] 9 Hacktool.Rootkit!sd6 [PC Tools] 6 Rootkit.Agent!sd5 [PC Tools] 4 Rootkit.Qandr [PC Tools] 3 Rootkit.Win32.Agent.aag [Kaspersky Lab] 3 Infostealer.Gampass [Symantec] 2 Rootkit.Win32.Qandr.ji [Kaspersky Lab] 2 New Malware.bl [McAfee] 1 Rootkit.Win32.Agent [Ikarus] 1 Rootkit.Win32.Agent.aag [Ikarus] 1 Rootkit.Win32.Agent.bsq [Kaspersky Lab] 1 Rootkit.Win32.Qandr.bo [Kaspersky Lab] 1 Rootkit.Win32.Qandr.df [Kaspersky Lab] 1 Rootkit.Win32.Qandr.du [Kaspersky Lab] 1 Rootkit.Win32.Qandr.eh [Kaspersky Lab] 1 Rootkit.Win32.Qandr.ep [Kaspersky Lab] 1 Rootkit.Win32.Qandr.ib [Kaspersky Lab] 1 Rootkit.Win32.Qandr.if [Kaspersky Lab] 1 Rootkit.Win32.Qandr.jl [Kaspersky Lab] 1 Rootkit.Win32.Qandr.r [Kaspersky Lab] 1 TROJ_QANDR.AA [Trend Micro] 1 TROJ_SRIZBI.AB [Trend Micro] 1 TROJ_SRIZBI.HH [Trend Micro] 1 Trojan Horse [Symantec] 1 Trojan.Win32.Pakes.juy [Kaspersky Lab] 1 Win-Trojan/Qandr.126464.I [AhnLab] 1 Win-Trojan/Qandr.128512.H [AhnLab] 1

Mal/RootKit-C [Sophos] is known to be created as:

%System%\drivers\amh51.sys %System%\drivers\csi56.sys %System%\drivers\ecn43.sys %System%\drivers\gem42.sys %System%\drivers\ghyp72.sys %System%\drivers\joa37.sys %System%\drivers\jrx63.sys %System%\drivers\kvbo58.sys %System%\drivers\mat39.sys %System%\drivers\mio42.sys %System%\drivers\mvdy68.sys %System%\drivers\nas37.sys %System%\drivers\nds40.sys %System%\drivers\nuf44.sys %System%\drivers\ocp35.sys %System%\drivers\qandr.sys %System%\drivers\qdnt51.sys %System%\drivers\rkm37.sys %System%\drivers\scm28.sys %System%\drivers\symavc32.sys %System%\drivers\tdt35.sys %System%\drivers\tnxf54.sys %System%\drivers\tpx51.sys %System%\drivers\unbf31.sys %System%\drivers\xojx55.sys %System%\drivers\xvm42.sys %System%\drivers\yoq38.sys

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).