Threat Search: 

ThreatExpert's Statistics for Virus.Win32.Virut.ah [Kaspersky Lab]:

Virus.Win32.Virut.ah [Kaspersky Lab] is also known as:
Threat AliasNumber of Incidents
PE_VIRUT.XW [Trend Micro]16
W32/Virut.gen.a [McAfee]16
Win32.Virut.Gen.4 [PC Tools]11
Bloodhound.Unknown [Symantec]6
Virus:Win32/Virut.V [Microsoft]6
W32.Virut.W [Symantec]5
W32/Virut-Gen [Sophos]4
Win32/Virut.B [AhnLab]4
Backdoor.Win32.VanBot [Ikarus]1
Generic.PWS.Games.4 [Ikarus]1
Mal/EncPk-BW, Mal/TibsPak, W32/Virut-Gen [Sophos]1
Mal/HckPk-A, W32/Virut-Gen [Sophos]1
Virus.Win32.Virut.au [Ikarus]1
W32.IRCBot [Symantec]1
W32.Spybot.Worm [Symantec]1
Win32.SuspectCrc [Ikarus]1
Worm.Bobax.AB [PC Tools]1
Worm.SdBot.GFN [PC Tools]1
Worm.VB.ZUI [PC Tools]1

Virus.Win32.Virut.ah [Kaspersky Lab] is known to be created as:
%System%\algs.exe
%System%\firewall.exe
%System%\iexplore.exe
%System%\lasfyjojnr.exe
%System%\logon.exe
%System%\msnnmaneger.exe
%System%\winsit.exe
%System%\winsp32.exe
%Windir%\antiv.exe
%Windir%\dc.exe
%Windir%\help\other.exe
%Windir%\inf\other.exe
%Windir%\sviq.exe
%Windir%\system\fun.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.