Threat Search: 

ThreatExpert's Statistics for PE_VIRUT.BA [Trend Micro]:

PE_VIRUT.BA [Trend Micro] is also known as:
Threat AliasNumber of Incidents
Virus.Win32.Virut.bx [Kaspersky Lab]67
Virus:Win32/Virut.AU [Microsoft]66
W32/Virut.j [McAfee]63
W32.Virut.W [Symantec]58
W32/Virut-Gen [Sophos]45
Virus.Win32.Virut.au [Ikarus]32
Win32/Virut.Gen [AhnLab]22
Mal/HckPk-A, W32/Virut-Gen [Sophos]18
Virus.Win32.Sality [Ikarus]12
Trojan Horse [Symantec]4
FakeAlert-AG.gen.c [McAfee]3
Infostealer [Symantec]2
Trojan.Pandex [Symantec]2
Trojan-Dropper.Win32.Cutwail.AL [Ikarus]2
Virus.Win32.Sality.s [Ikarus]2
Backdoor.Win32.Beastdoor [Ikarus]1
Backdoor.Win32.Haxdoor [Ikarus]1
Backdoor.Win32.IRCBot [Ikarus]1
Downloader.MisleadApp [Symantec]1
Email-Worm.Win32.Mydoom.bj [Ikarus]1
Generic PWS.ak [McAfee]1
Mal/Behav-043, W32/Virut-Gen [Sophos]1
Mal/Generic-A, W32/Virut-Gen [Sophos]1
Mal/HckPk-A [Sophos]1
Malware.Virut [PC Tools]1
New Win32 [McAfee]1
Packer.RLPack.D [Ikarus]1
Spam-Mailbot [McAfee]1
Trojan.Agent.DEL [PC Tools]1
Trojan.Jonben.A [PC Tools]1
Trojan-Downloader.Win32.AutoIt.q [Ikarus]1
Trojan-Downloader.Win32.Pakernat.A [Ikarus]1
Trojan-Dropper.Agent [Ikarus]1
Trojan-Dropper.Kobcka [Ikarus]1
Trojan-Dropper.Win32.Cutwail [Ikarus]1
TrojanDropper:Win32/Cutwail [Microsoft]1
VirTool.Win32.DelfInject [Ikarus]1
VirTool.Win32.DelfInject.AC [Ikarus]1
Virus.Trojan.Win32.VB [Ikarus]1
Virus.Win32.Virtumonde [Ikarus]1
W32.Mytob@mm [Symantec]1
W32/Sohana-AM [Sophos]1
Win32.SuspectCrc [Ikarus]1
Worm.Win32.AutoRun [Ikarus]1
Worm:Win32/Hamweq.D [Microsoft]1

PE_VIRUT.BA [Trend Micro] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation3
China1
Finland1
France1
Iran1
Israel1
Ukraine1
United Kingdom1

PE_VIRUT.BA [Trend Micro] is known to be created as:
%ProgramFiles%\microsoft common\wuauclt.exe
%System%\amvo.exe
%System%\blastclnnn.exe
%System%\dxgdialog.exe
%System%\msnclicfg.exe
%System%\olhrwef.exe
%System%\reader.exe
%System%\reader_s.exe
%System%\rs32net.exe
%System%\save.exe
%System%\scvhsot.exe
%System%\win2x.exe
%Temp%\init.exe
%UserProfile%\reader_s.exe
%Windir%\dhcp\svchost.exe
%Windir%\hinhem.scr
%Windir%\rbsbbrra.exe
%Windir%\scvhsot.exe
%Windir%\services.exe
c:\e8kj.exe
c:\ms-dos\ntdlr.com
c:\smss.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.