Threat Search: 

ThreatExpert's Statistics for Virus.Win32.Protector [Ikarus]:

Virus.Win32.Protector [Ikarus] is also known as:
Threat AliasNumber of Incidents
Win32/Dnis.C [AhnLab]111
Troj/Pushu-Gen, Mal/Fakedis-A [Sophos]105
Virus.Win32.Protector.b [Kaspersky Lab]92
Trojan.Neprodoor!inf [Symantec]71
Virus:Win32/Cutwail.F [Microsoft]63
Trojan.Protector.b [PC Tools]9
Win32/Ntfs [AhnLab]9
Virus.Win32.Protector.c [Kaspersky Lab]8
Virus:Win32/Cutwail.H [Microsoft]7
Mal/Fakedis-A [Sophos]6
Hacktool.Rootkit [Symantec]5
Mal/Generic-A [Sophos]4
Hacktool.Rootkit [PC Tools]3
Troj/NTFSKit-B [Sophos]2
Virus:Win32/Cutwail.G [Microsoft]2
Cutwail.gen.e [McAfee]1
Generic.dx!fzo [McAfee]1
Generic.dx!jl [McAfee]1
Generic.dx!jy [McAfee]1
Generic.dx!vt [McAfee]1

Virus.Win32.Protector [Ikarus] is known to be created as:
%System%\dllcache\agp440.sys
%System%\dllcache\atapi.sys
%System%\dllcache\ndis.sys
%System%\dllcache\ntfs.sys
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).