ThreatExpert's Statistics for Mal/EncPk-GS [Sophos]:

Mal/EncPk-GS [Sophos] is also known as:

Threat Alias Number of Incidents PWS-Zbot.gen.c [McAfee] 39 TrojanSpy:Win32/Zbot.gen!C [Microsoft] 33 Packed.Generic.196 [Symantec] 27 Trojan-Spy.Win32.Zbot [Ikarus] 10 Infostealer [Symantec] 6 Infostealer.Banker.C [Symantec] 6 PWS:Win32/Zbot.GA [Microsoft] 6 Trojan-Spy.Win32.Zbot.roh [Kaspersky Lab] 5 Virus.Win32.Zbot [Ikarus] 4 Win32/IRCBot.worm.variant [AhnLab] 4 Trojan-Spy.Zbot!sd6 [PC Tools] 3 Trojan.Win32.Zbot [Ikarus] 2 Trojan-Spy.Win32.Zbot.fph [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.fqz [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.fxe [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.gae [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.gaq [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.gbp [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.mms [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.ojb [Kaspersky Lab] 2 Win-Trojan/Wsnpoem.55296 [AhnLab] 2 Trojan-Banker.Win32.Bancos [Ikarus] 1 Trojan-Banker.Win32.Bancos.dfp [Kaspersky Lab] 1 Trojan-Spy.Win32.Zbot.fzm [Kaspersky Lab] 1 Trojan-Spy.Win32.Zbot.nrq [Kaspersky Lab] 1 Trojan-Spy.Win32.Zbot.pjd [Kaspersky Lab] 1

Mal/EncPk-GS [Sophos] is known to be created as:

%System%\twext.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).