ThreatExpert's Statistics for Rootkit.Protector [PC Tools]:

Rootkit.Protector [PC Tools] is also known as:

Threat Alias	Number of Incidents
Cutwail.gen.a [McAfee]	24
Rootkit.Win32.Protector.bd [Kaspersky Lab]	24
Troj/Pushu-Gen [Sophos]	24
TROJ_PANDEX.ROY [Trend Micro]	24
Trojan.Pandex [Symantec]	24
VirTool.WinNT.Cutwail.K [Ikarus]	24
VirTool:WinNT/Cutwail.K [Microsoft]	24
Win-Trojan/Kobcka.32256 [AhnLab]	1

Rootkit.Protector [PC Tools] is known to be created as:

%System%\drivers\ati0fpxx.sys

%System%\drivers\ati0xixx.sys

%System%\drivers\ati1juxx.sys

%System%\drivers\ati1oyxx.sys

%System%\drivers\ati1vbxx.sys

%System%\drivers\ati3qcxx.sys

%System%\drivers\ati4bjxx.sys

%System%\drivers\ati4gnxx.sys

%System%\drivers\ati4irxx.sys

%System%\drivers\ati6ajxx.sys

%System%\drivers\ati6ekxx.sys

%System%\drivers\ati6grxx.sys

%System%\drivers\ati6yjxx.sys

%System%\drivers\ati7gpxx.sys

%System%\drivers\ati7jsxx.sys

%System%\drivers\ati7tfxx.sys

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).