Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Oct 27, 2008 | Updated Sep 15, 2017

VirTool:WinNT/Cutwail.K

Detected by Microsoft Defender Antivirus

Aliases: Trojan.Kobcka.FB (BitDefender) Win32/Cutwail.PG (CA) Win32/Wigon.ER (ESET) W32/Warezov.gen4 (Frisk (F-Prot)) Rootkit.Win32.Agent.cmo (Kaspersky) Cutwail.gen.a (McAfee) W32/Rootkit.QAM (Norman) Troj/Pushu-Gen (Sophos) Trojan.Pandex (Symantec) Rootkit.Pandex.AK (VirusBuster)

Summary

Cutwail is a trojan which is able to download and executes arbitrary files. Downloaded files may be executed from disk or injected directly into another process. Whilst the functionality of the files that are downloaded may change, Cutwail usually downloads a trojan which is able to send spam. Cutwail also employs rootkit and other defensive techniques to avoid detection and removal.
 
VirTool:WinNT/Cutwail.K is a device driver component (rootkit) used by Cutwail malware family.
It contains functionality to modify the system's winlogon.exe.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as the Microsoft Safety Scanner (http://go.microsoft.com/fwlink/?LinkId=212742). For more information, see http://www.microsoft.com/protect/computer/viruses/vista.mspx.
Follow us