Threat Search: 

ThreatExpert's Statistics for Rootkit.Bagle.Gen.21 [PC Tools]:

Rootkit.Bagle.Gen.21 [PC Tools] is also known as:
Threat AliasNumber of Incidents
Hacktool.Rootkit [Symantec]170
Trojan:WinNT/Bagle.gen [Microsoft]167
Mal/Generic-A [Sophos]125
Downloader.gen.a [McAfee]105
Trojan-Downloader.Win32.Bagle.vj [Kaspersky Lab]100
Trojan-Dropper.Win32.MultiJoiner [Ikarus]43
Generic.dx [McAfee]30
TROJ_BAGLE.QF [Trend Micro]27
Trojan-Downloader.Win32.Bagle.zf [Kaspersky Lab]24
Win32/NullSectDrv.Suspicious [AhnLab]22
Mal/RootKit-Fam [Sophos]19
Trojan-Downloader.Win32.Bagle.mm [Kaspersky Lab]15
Hacktool.Rootkit!sd6 [PC Tools]9
Trojan-Downloader.Win32.Bagle.iw [Kaspersky Lab]9
Generic Downloader.x [McAfee]6
Trojan-Downloader.Win32.Bagle [Ikarus]6
Trojan-Dropper.Win32.MultiJoiner.13.a [Ikarus]5
Trojan Horse [Symantec]4
Trojan:WinNT/Bagle.gen!B [Microsoft]4
Trojan-Downloader.Bagle!ct [PC Tools]4
Trojan-Downloader.Win32.Bagle.aek [Kaspersky Lab]4
Trojan-Downloader.Win32.Bagle.jg [Kaspersky Lab]4
Trojan-Downloader.Win32.Bagle.jh [Kaspersky Lab]4
Trojan-Downloader.Win32.Bagle.ke [Kaspersky Lab]4
Trojan-Downloader.Win32.Bagle.ys [Kaspersky Lab]4
Win-Trojan/Bagle.100352 [AhnLab]4
Trojan-Downloader.Win32.Bagle.avs [Kaspersky Lab]3
Win-Trojan/Rootkit.91096 [AhnLab]2
Generic.dx!s [McAfee]1
Mal_MLWR-1 [Trend Micro]1
RTKT_AGENT.AJJJ [Trend Micro]1
Troj/Agent-JQG [Sophos]1
TROJ_BAGLE.TZ [Trend Micro]1
Trojan.WinNT [Ikarus]1
Trojan-Downloader.Win32.Bagle.afl [Kaspersky Lab]1
Trojan-Downloader.Win32.Bagle.afx [Kaspersky Lab]1
Trojan-Downloader.Win32.Bagle.amj [Kaspersky Lab]1
Trojan-Downloader.Win32.Bagle.arw [Kaspersky Lab]1
Trojan-Downloader.Win32.Bagle.hm [Kaspersky Lab]1
Trojan-Downloader.Win32.Bagle.jx [Kaspersky Lab]1
Win-Trojan/Agent.117836 [AhnLab]1

Rootkit.Bagle.Gen.21 [PC Tools] is known to be created as:
%System%\drivers\srosa.sys
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).