Threat Search: 

ThreatExpert's Statistics for TrojanDownloader:Win32/Cutwail [Microsoft]:

TrojanDownloader:Win32/Cutwail [Microsoft] is also known as:
Threat AliasNumber of Incidents
Downloader [Symantec]9
Troj/DwnLdr-HKK [Sophos]8
Trojan-Downloader.Win32.Cutwail [Ikarus]8
Generic FakeAlert.a [McAfee]6
Trojan.Win32.Agent.amxg [Kaspersky Lab]4
Mal/EncPk-HJ [Sophos]3
Mal/Pushdo-A [Sophos]3
Trojan.Kobcka [Ikarus]3
Trojan.Win32.Agent2.hck [Kaspersky Lab]3
FakeAlert-AG.gen.c [McAfee]2
Trojan Horse [Symantec]2
Trojan.Pandex [PC Tools]2
Trojan.Pandex [Symantec]2
Trojan.Win32.Inject.jxk [Kaspersky Lab]2
Trojan-Downloader.Agent.BWH [PC Tools]2
Trojan-Dropper.Win32.Agent.bjgv [Kaspersky Lab]2
W32/Harebot-C [Sophos]2
Backdoor.Win32.Small.zp [Kaspersky Lab]1
Cutwail [McAfee]1
Downloader.Generic [PC Tools]1
Generic Downloader.x [McAfee]1
Generic Dropper.or [McAfee]1
Generic.dx [McAfee]1
Troj/FakeAV-AGU [Sophos]1
Trojan.Agent2!sd6 [PC Tools]1
Trojan.Win32.Agent.asiv [Kaspersky Lab]1
Trojan.Win32.Agent2 [Ikarus]1
Trojan.Win32.Cutwail [Ikarus]1
Trojan-Dropper.Agent [Ikarus]1
Virus.Trojan.Win32.Agent2 [Ikarus]1
Virus.Win32.HareBot [Ikarus]1
Win-Trojan/Cutwail.26707 [AhnLab]1
Win-Trojan/Cutwail.32768 [AhnLab]1
Win-Trojan/Kobcka.40960.F [AhnLab]1
Win-Trojan/Xema.26710 [AhnLab]1

TrojanDownloader:Win32/Cutwail [Microsoft] is known to be created as:
%System%\av_md.exe
%System%\reader_s.exe
%System%\rs32net.exe
%Temp%\windows\system32\reader_s.exe
%UserProfile%\av_md.exe
%UserProfile%\reader_s.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).