Threat Search: 

ThreatExpert's Statistics for Mal/WaledPak-B [Sophos]:

Mal/WaledPak-B [Sophos] is also known as:
Threat AliasNumber of Incidents
W32.Waledac [Symantec]10
Trojan:Win32/Waledac.gen!A [Microsoft]7
Trojan.Win32.Waledac [Ikarus]5
Email-Worm.Win32.Iksmas.afe [Kaspersky Lab]4
Packed.Generic.234 [Symantec]4
FakeAlert-WinwebSecurity.a [McAfee]3
Trojan:Win32/Winwebsec [Microsoft]3
Email-Worm.Win32.Iksmas.gen [Kaspersky Lab]2
Spammer:Win32/Tedroo.I [Microsoft]2
Trojan Horse [Symantec]2
Trojan.Win32.Winwebsec [Ikarus]2
Virus.Win32.Virut.n [Kaspersky Lab]2
Win32/Kolabc.worm.85363 [AhnLab]2
Worm:Win32/Wootbot.EG [Microsoft]2
Email-Worm.Iksmas!sd6 [PC Tools]1
Email-Worm.Iksmas.gen [PC Tools]1
Email-Worm.Win32.Iksmas [Ikarus]1
Email-Worm.Win32.Iksmas.ns [Kaspersky Lab]1
FakeAlert-AB [McAfee]1
FakeAlert-WinwebSecurity.gen [McAfee]1
Generic Downloader.ab [McAfee]1
Generic Downloader.x!gl [McAfee]1
Generic FakeAlert.d!gen [McAfee]1
Mal/FakeAV-AX, Mal/EncPk-MX, Mal/WaledPak-B [Sophos]1
Net-Worm.Waledac [PC Tools]1
Net-Worm.Win32.Allaple [Ikarus]1
not-a-virus:FraudTool.Win32.SystemSecurity.nr [Kaspersky Lab]1
Packed.Generic.233 [Symantec]1
Spam-Mailbot.h.gen.b [McAfee]1
Suspicious.MH690 [Symantec]1
Trojan.FakeAlert [PC Tools]1
Trojan.Win32.Rabbit.je [Kaspersky Lab]1
Trojan.Win32.Spamer.l [Kaspersky Lab]1
Trojan.Win32.SystemHijack [Ikarus]1
Trojan:Win32/Pigax.gen!A [Microsoft]1
Trojan-Downloader.Win32.Cutwail [Ikarus]1
Trojan-Downloader.Win32.FraudLoad.wcfd [Kaspersky Lab]1
Trojan-Downloader.Win32.FraudLoad.wcjx [Kaspersky Lab]1
TrojanDownloader:Win32/Cutwail.AI [Microsoft]1
Virus.Virut!ct [PC Tools]1
Virus.Win32.Virut.n [Ikarus]1
W32.Virut.B [Symantec]1
W32.Virut.R [Symantec]1
W32/Virut.m [McAfee]1
W32/Virut.remnants [McAfee]1
W32/Waledac [McAfee]1
W32/Waledac.gen.e [McAfee]1
W32/Waledac.gen.h [McAfee]1
Win32.Virut.Gen [PC Tools]1
Win-Trojan/Downloader.52737 [AhnLab]1
Win-Trojan/Spamer.23553 [AhnLab]1
Win-Trojan/Waledac.413696.B [AhnLab]1
Win-Trojan/Waledac.441345.J [AhnLab]1
Win-Trojan/Winwebsec.37420 [AhnLab]1
Worm:Win32/Mariofev.A [Microsoft]1
WORM_WALEDAC.SR [Trend Micro]1

Mal/WaledPak-B [Sophos] is known to be created as:
%CommonAppData%\12903284\12903284.exe
%CommonAppData%\91170146\91170146.exe
%CommonAppData%\92913276\92913276.exe
%System%\iexplorer.exe
%System%\twex.exe
%Windir%\msauc.exe
Notes:
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.