Threat Search: 

ThreatExpert's Statistics for Worm.Win32.Rokut [Ikarus]:

Worm.Win32.Rokut [Ikarus] is also known as:
Threat AliasNumber of Incidents
Mal/Banspy-F [Sophos]6
Infostealer.Bancos [Symantec]3
Trojan Horse [Symantec]3
Mal_Banker [Trend Micro]2
PWS-Banker.gen.i [McAfee]2
Suspicious.MH690 [Symantec]2
Trojan.Win32.Agent.csay [Kaspersky Lab]2
TrojanDownloader:Win32/Banload.gen!N [Microsoft]2
Mal/Behav-103 [Sophos]1
Mal/Behav-180 [Sophos]1
Mal/DelpDldr-I, Mal/Behav-180 [Sophos]1
Mal/Generic-A [Sophos]1
Trojan.Banker.BN [PC Tools]1
Trojan-Banker.Win32.Banbra.iuz [Kaspersky Lab]1
Trojan-Banker.Win32.Banker.law [Kaspersky Lab]1
Trojan-Banker.Win32.Banker.sdu [Kaspersky Lab]1
Trojan-Banker.Win32.Banz.dr [Kaspersky Lab]1
Trojan-Downloader.Win32.Delf.veq [Kaspersky Lab]1
Trojan-PSW.Bancos [PC Tools]1
TrojanSpy.Banker.AVUU [PC Tools]1
Win-Trojan/Banker.1088000.C [AhnLab]1
Win-Trojan/Xema.variant [AhnLab]1
Worm.Win32.Rokut.hf [Kaspersky Lab]1
Worm.Win32.Rokut.ot [Kaspersky Lab]1

Worm.Win32.Rokut [Ikarus] has the following possible country of origin:
OriginNumber of Incidents
Brazil13

Worm.Win32.Rokut [Ikarus] is known to be created as:
%CommonPrograms%\startup\avg.exe
%System%\sys32.exe
%Temp%\virus capture\winntr2.exe
Notes:
  • %CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).