ThreatExpert's Statistics for VirTool.WinNT.Cutwail.K [Ikarus]:

VirTool.WinNT.Cutwail.K [Ikarus] is also known as:

Threat Alias	Number of Incidents
Cutwail.gen.a [McAfee]	61
Rootkit.Win32.Protector.bd [Kaspersky Lab]	61
Troj/Pushu-Gen [Sophos]	61
Trojan.Pandex [Symantec]	61
VirTool:WinNT/Cutwail.K [Microsoft]	61
TROJ_PANDEX.ROY [Trend Micro]	60
Rootkit.Protector [PC Tools]	24
Rootkit.Agent [PC Tools]	16
Trojan.Pandex!sd6 [PC Tools]	3
Win-Trojan/Kobcka.32256 [AhnLab]	1

VirTool.WinNT.Cutwail.K [Ikarus] is known to be created as:

%System%\drivers\ati0coxx.sys

%System%\drivers\ati0fpxx.sys

%System%\drivers\ati0qaxx.sys

%System%\drivers\ati0xixx.sys

%System%\drivers\ati1juxx.sys

%System%\drivers\ati1mwxx.sys

%System%\drivers\ati1oyxx.sys

%System%\drivers\ati1vbxx.sys

%System%\drivers\ati1wjxx.sys

%System%\drivers\ati2tfxx.sys

%System%\drivers\ati2xhxx.sys

%System%\drivers\ati3pyxx.sys

%System%\drivers\ati3qcxx.sys

%System%\drivers\ati4bjxx.sys

%System%\drivers\ati4gnxx.sys

%System%\drivers\ati4irxx.sys

%System%\drivers\ati4rdxx.sys

%System%\drivers\ati5tcxx.sys

%System%\drivers\ati6ajxx.sys

%System%\drivers\ati6ekxx.sys

%System%\drivers\ati6grxx.sys

%System%\drivers\ati6kuxx.sys

%System%\drivers\ati6yjxx.sys

%System%\drivers\ati6ykxx.sys

%System%\drivers\ati7gpxx.sys

%System%\drivers\ati7hsxx.sys

%System%\drivers\ati7jsxx.sys

%System%\drivers\ati7kvxx.sys

%System%\drivers\ati7pbxx.sys

%System%\drivers\ati7tbxx.sys

%System%\drivers\ati7tfxx.sys

%System%\drivers\ati8ukxx.sys

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).