Threat Search: 

ThreatExpert's Statistics for W32/Waledac.gen.b [McAfee]:

W32/Waledac.gen.b [McAfee] is also known as:
Threat AliasNumber of Incidents
Mal/WaledPak-A [Sophos]17
W32.Waledac [Symantec]16
TrojanDownloader:Win32/Bredolab.B [Microsoft]10
Infostealer.Banker.C [Symantec]8
Trojan-Spy.Win32.Zbot.mlk [Kaspersky Lab]8
Trojan Horse [Symantec]7
Trojan.Waledac [Ikarus]7
Email-Worm.Iksmas!sd6 [PC Tools]4
Email-Worm.Win32.Iksmas.cu [Kaspersky Lab]4
Mal/Generic-A [Sophos]4
PWS:Win32/Zbot.UO [Microsoft]4
Trojan-Downloader.Win32.Bredolab [Ikarus]4
Win-Trojan/Horst.58368.F [AhnLab]4
Trojan-Spy.Win32.Zbot [Ikarus]3
Backdoor.Trojan [Symantec]2
Trojan.Win32.Pakes [Ikarus]2
Trojan.Win32.Waledac [Ikarus]2
Trojan:Win32/Waledac.B [Microsoft]2
Trojan-Dropper.Agent [Ikarus]2
Trojan-Spy.Banker!sd6 [PC Tools]2
Win-Trojan/Waledac.395776.B [AhnLab]2
Backdoor.Win32.Agent.adnf [Kaspersky Lab]1
Backdoor.Win32.Hupigon [Ikarus]1
Backdoor.Win32.Hupigon.fwtp [Kaspersky Lab]1
Backdoor.Win32.Small.hiy [Kaspersky Lab]1
Email-Worm.Win32.Iksmas [Ikarus]1
Email-Worm.Win32.Iksmas.bi [Kaspersky Lab]1
Email-Worm.Win32.Iksmas.dt [Kaspersky Lab]1
Email-Worm.Win32.Iksmas.dw [Kaspersky Lab]1
Email-Worm.Win32.Iksmas.eh [Kaspersky Lab]1
Email-Worm.Win32.Iksmas.ei [Kaspersky Lab]1
Mal/Swizzor-D, Mal/WaledPak-A [Sophos]1
Mal/Waledec-A, Mal/WaledPak-A, Mal/EncPk-EV [Sophos]1
Mal/WaledPak-A, Mal/Waledec-A, Mal/EncPk-EV [Sophos]1
Packed.Win32.NSAnti.ew [Kaspersky Lab]1
Suspicious.MH690 [Symantec]1
Troj/Agent-GTD [Sophos]1
Troj/Agent-ITY [Sophos]1
Trojan.Dropper [Symantec]1
Trojan.Generic [Ikarus]1
Trojan.Pakes!sd6 [PC Tools]1
Trojan.Vundo [Symantec]1
Trojan.Win32.Agent.bluz [Kaspersky Lab]1
Trojan.Win32.Agent.bpat [Kaspersky Lab]1
Trojan.Win32.Agent2.doj [Kaspersky Lab]1
Trojan.Win32.Meredrop [Ikarus]1
Trojan.Win32.Pakes.meg [Kaspersky Lab]1
Trojan.Win32.Pakes.mtk [Kaspersky Lab]1
Trojan.Win32.Pakes.mup [Kaspersky Lab]1
Trojan.Win32.Pakes.mzz [Kaspersky Lab]1
Trojan.Win32.Small.bsa [Kaspersky Lab]1
Trojan.Win32.Small.btk [Kaspersky Lab]1
Trojan:Win32/Meredrop [Microsoft]1
Trojan:Win32/Waledac.D [Microsoft]1
Trojan:Win32/Waledac.F [Microsoft]1
Trojan:Win32/Waledac.H [Microsoft]1
Trojan-Banker.Win32.Bancos [Ikarus]1
Trojan-Banker.Win32.Bancos.dgw [Kaspersky Lab]1
Trojan-Downloader.Small!sd6 [PC Tools]1
Trojan-Downloader.Win32.Agent.bfsc [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.bgaw [Kaspersky Lab]1
Trojan-Downloader.Win32.Small [Ikarus]1
Trojan-Downloader.Win32.Small.jdk [Kaspersky Lab]1
Trojan-Dropper.Agent!sd6 [PC Tools]1
Trojan-Dropper.Win32.Agent.agpq [Kaspersky Lab]1
Virus.Trojan.Win32.Agent [Ikarus]1
W32/Waled-T [Sophos]1
W32/Waled-W [Sophos]1
W32/Waled-Y [Sophos]1
Win32/Iksmas.worm.397312 [AhnLab]1
Win32/Waledac.worm.392704 [AhnLab]1
Win-Trojan/Agent.22016.LJ [AhnLab]1
Win-Trojan/Agent.24064.HR [AhnLab]1
Win-Trojan/Downloader.24064.IM [AhnLab]1
Win-Trojan/Waledac.22528 [AhnLab]1
Win-Trojan/Xema.variant [AhnLab]1

W32/Waledac.gen.b [McAfee] is known to be created as:
%System%\cssrss.exe
%System%\digeste.dll
%System%\ntos.exe
%Windir%\msauc.exe
%Windir%\services.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.