Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Apr 21, 2010 | Updated Sep 15, 2017

Virus:WinNT/Cutwail.gen!A

Detected by Microsoft Defender Antivirus

Aliases: Trojan-Dropper.Win32.Mazik.bg (Kaspersky) Trojan horse Generic_r.DD (AVG) Win32/Protector.I (ESET) VirTool.WinNT.Cutwail (Ikarus) Trojan-Dropper.Win32.Mazik.bg (Kaspersky) :Bck/Injector.I (Panda) Troj/Mazik-A (Sophos) Trojan.Win32.Generic!BT (Sunbelt Software) Hacktool.Rootkit!inf (Symantec)

Summary

Virus:Win32/Cutwail.gen!A is a generic detection for Win32/Cutwail; a multi-component family of malware that downloads and executes arbitrary files.
 
Virus:Win32/Cutwail.gen!A is mostly used to install additional Cutwail components, and other malware on an affected machine.
 
In general, the Cutwail family is used to compromise machines and direct them in various ways at the attacker's will, usually for monetary gain. This could include using the affected machine to:
  • Distribute additional malware
  • Send spam
  • Generate 'pay per click' advertising revenue
  • Harvest e-mail addresses
  • Break captchas
 
Its components are varied, but include:
  • Trojan downloaders and droppers
  • Spammers
  • Viruses
 
Cutwail also employs a rootkit and other defensive techniques to avoid detection and removal.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.
Follow us