Threat Search: 

ThreatExpert's Statistics for Win32.Virut.U [Ikarus]:

Win32.Virut.U [Ikarus] is also known as:
Threat AliasNumber of Incidents
PE_VIRUT.AP [Trend Micro]29
Virus.Win32.Virut.bw [Kaspersky Lab]29
Virus:Win32/Virut.BI [Microsoft]29
W32/Virut.j [McAfee]29
W32/Virut-Gen [Sophos]28
W32.Virut.W [Symantec]26
Win32/Virut.Gen [AhnLab]7
Infostealer [Symantec]2
Mal/HckPk-A, W32/Virut-Gen [Sophos]1
Trojan.Pandex [Symantec]1

Win32.Virut.U [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
China3
Australia1

Win32.Virut.U [Ikarus] is known to be created as:
%CommonAppData%\cfunilcb\arenqnqd.exe
%System%\csrsc.exe
%System%\reader_s.exe
%System%\rs32net.exe
%UserProfile%\reader_s.exe
c:\my girls\folderdata.exe
c:\recycler\lsass.exe
Notes:
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).