ThreatExpert's Statistics for W32.Waledac [Symantec]:

W32.Waledac [Symantec] is also known as:

Threat Alias	Number of Incidents
Trojan:Win32/Waledac.gen!A [Microsoft]	97
W32/Waledac.gen.e [McAfee]	76
Mal/WaledPak-A [Sophos]	65
Trojan.Win32.Waledac [Ikarus]	65
HeurEngine.Waledac [PC Tools]	48
W32/Waledac.gen.h [McAfee]	45
Email-Worm.Win32.Iksmas [Ikarus]	43
Mal/WaledPak-A, Mal/TibsPk-D [Sophos]	35
Mal/WaledPak-B, Mal/WaledPak-A [Sophos]	35
Email-Worm.Win32.Iksmas.gen [Kaspersky Lab]	31
Packed.Win32.Krap.m [Kaspersky Lab]	30
Net-Worm.Waledac [PC Tools]	27
WORM_WALEDAC.SR [Trend Micro]	27
Email-Worm.Iksmas!sd6 [PC Tools]	25
Packed.Win32.Krap.i [Kaspersky Lab]	18
W32/Waledac.gen [McAfee]	18
W32/Waled-Gen [Sophos]	17
W32/Waledac.gen.b [McAfee]	16
Packed.Win32.Krap [Ikarus]	14
Trojan.Waledac [Ikarus]	14
Generic.dx [McAfee]	13
Email-Worm.Waledac [PC Tools]	11
Trojan:Win32/Waledac.B [Microsoft]	11
TrojanDownloader:Win32/Bredolab.B [Microsoft]	11
WORM_WALEDAC.RUI [Trend Micro]	11
Mal/WaledPak-B [Sophos]	10
Mal/Generic-A [Sophos]	8
W32/Waledac.gen.a [McAfee]	8
Trojan-Downloader.Win32.Bredolab [Ikarus]	7
Email-Worm.Iksmas [PC Tools]	6
Backdoor.Win32.Hupigon [Ikarus]	5
Email-Worm.Iksmas.gen [PC Tools]	5
W32/Waledac [McAfee]	5
W32/Waledac.gen.c [McAfee]	5
Backdoor.Win32.Hupigon.glka [Kaspersky Lab]	4
Email-Worm.Win32.Iksmas.afe [Kaspersky Lab]	4
Email-Worm.Win32.Iksmas.cu [Kaspersky Lab]	4
Email-Worm.Win32.Iksmas.df [Kaspersky Lab]	4
Mal/WaledPak-A, Mal/Waledec-A, Mal/EncPk-EV [Sophos]	4
Mal/WaledPak-B, Mal/WaledPak-A, Mal/TibsPk-D [Sophos]	4
Mal/WaledPak-D, Mal/WaledPak-B, Mal/WaledPak-A [Sophos]	4
PWS:Win32/Zbot.UO [Microsoft]	4
W32/Waled-BL [Sophos]	4
W32/Waled-P [Sophos]	4
Win-Trojan/Krap.449536 [AhnLab]	4
WORM_WALEDAC.HY [Trend Micro]	4
Email-Worm.Win32.Iksmas.f [Kaspersky Lab]	3
Mal/Behav-321, Mal/WaledPak-A [Sophos]	3
Trojan:Win32/Waledac [Microsoft]	3
Virus.Win32.Virut.ce [Kaspersky Lab]	3
W32/Waled-R [Sophos]	3
Email-Worm.Win32.Iksmas.be [Kaspersky Lab]	2
Generic.dx!dd [McAfee]	2
Mal/Swizzor-D, Mal/WaledPak-A [Sophos]	2
Mal/Waledec-A, Mal/WaledPak-A, Mal/EncPk-EV [Sophos]	2
Mal/WaledPak-D, Mal/WaledPak-B [Sophos]	2
Mal/WaledPak-E [Sophos]	2
Mal/WaledPak-E, Mal/WaledPak-D [Sophos]	2
Packed.Win32.Krap.x [Kaspersky Lab]	2
Spam-Mailbot.h.gen.a [McAfee]	2
Trojan-Banker.Win32.Bancos [Ikarus]	2
Trojan-Downloader.Small!sd6 [PC Tools]	2
W32/Waledac.gen.n [McAfee]	2
W32/Waled-G [Sophos]	2
Win32/Waledac.worm.413696.D [AhnLab]	2
Win-Trojan/Ebill.394240 [AhnLab]	2
Win-Trojan/Hupigon.410624.ML [AhnLab]	2
Win-Trojan/Krap.411648.BL [AhnLab]	2
Win-Trojan/Waledac.395776.B [AhnLab]	2
Win-Trojan/Waledac.399872.E [AhnLab]	2
Win-Trojan/Waledac.410624.G [AhnLab]	2
AdWare.AdSpy [Ikarus]	1
Backdoor.Win32.Bredavi.azn [Kaspersky Lab]	1
Backdoor.Win32.Hupigon.glkb [Kaspersky Lab]	1
Backdoor.Win32.Small.hiy [Kaspersky Lab]	1
Backdoor.Win32.Small.hkl [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.a [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.aae [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.aag [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.aar [Kaspersky Lab]	1
Email-Worm.Win32.iksmas.abg [Kaspersky Lab]	1
Email-Worm.Win32.iksmas.abh [Kaspersky Lab]	1
Email-Worm.Win32.iksmas.abi [Kaspersky Lab]	1
Email-Worm.Win32.iksmas.abj [Kaspersky Lab]	1
Email-Worm.Win32.iksmas.abk [Kaspersky Lab]	1
Email-Worm.Win32.iksmas.abl [Kaspersky Lab]	1
Email-Worm.Win32.iksmas.abm [Kaspersky Lab]	1
Email-Worm.Win32.iksmas.abu [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.abx [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.acc [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.acd [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.aco [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.acq [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.ady [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.adz [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.aen [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.aeo [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.afb [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.afw [Kaspersky Lab]	1
Email-Worm.Win32.Iksmas.afx [Kaspersky Lab]	1

W32.Waledac [Symantec] has the following possible countries of origin:

Origin		Number of Incidents
	Russian Federation	23
	China	6

W32.Waledac [Symantec] is known to be created as:

%System%\digeste.dll

%System%\ntos.exe

%System%\servises.exe

%Temp%\090322-1-1.exe

%Temp%\090322-2-7.exe

%Temp%\090322-2-8.exe

%Temp%\090322-3-1.exe

%Temp%\090322-3-6.exe

%Temp%\090322-4-8.exe

%Temp%\fuck3.exe

%Temp%\kafan virlist 2009.03.20\090320-6-6.exe

c:\conv.exe

c:\e4u.exe

c:\exrev.exe

Notes:

%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).