ThreatExpert's Statistics for Trojan.Win32.Rootkit.C [Ikarus]:

Trojan.Win32.Rootkit.C [Ikarus] is also known as:

Threat Alias	Number of Incidents
Mal/Behav-010 [Sophos]	12
Mal/Behav-156 [Sophos]	5
Trojan-Downloader.Win32.Agent.cjdg [Kaspersky Lab]	5
Backdoor.Trojan [Symantec]	4
Trojan-Spy.Win32.Agent.axdh [Kaspersky Lab]	4
Trojan.Agent2.cglu [PC Tools]	3
Trojan.KillAV [Symantec]	3
Mal/Generic-A [Sophos]	2
Trojan-Spy.Win32.Agent.awly [Kaspersky Lab]	2
Win-Trojan/Rootkit.69652 [AhnLab]	2
Backdoor.Trojan [PC Tools]	1
Backdoor.Win32.FirstInj.im [Kaspersky Lab]	1
Backdoor.Win32.Inject.bsx [Kaspersky Lab]	1
Win-Trojan/Firstinj.168448 [AhnLab]	1

Trojan.Win32.Rootkit.C [Ikarus] is known to be created as:

%Profiles%\local user\hook.dll

%System%\6to4ex.dll

%System%\nwcworkstation.dll

%System%\nwcworkstation360.dll

%System%\nwcworkstationys.exe

%System%\win.dll

Notes:

%Profiles% is a variable that refers to the file system directory containing user profile folders. A typical path is C:\Documents and Settings.
%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).