Threat Search: 

ThreatExpert's Statistics for Mal/EncPk-LE [Sophos]:

Mal/EncPk-LE [Sophos] is also known as:
Threat AliasNumber of Incidents
Trojan.Zbot [PC Tools]282
Trojan-Spy.Win32.Zbot.gen [Kaspersky Lab]269
PWS:Win32/Zbot.gen!R [Microsoft]225
Trojan.Zbot!gen3 [Symantec]210
Trojan-Spy.Win32.Zbot [Ikarus]197
Generic PWS.y!bni [McAfee]100
Win-Trojan/Zbot.139776.B [AhnLab]100
Trojan.Zbot!gen2 [Symantec]93
TSPY_ZBOT.SMJB [Trend Micro]70
PWS-Zbot.gen.x [McAfee]50
Generic PWS.y!brd [McAfee]18
PWS:Win32/Zbot.gen!W [Microsoft]18
W32/Sdbot.worm.gen.ax [McAfee]16
Packed.Win32.Krap.ae [Kaspersky Lab]13
PWS:Win32/Zbot.RS [Microsoft]11
Mal/Generic-A [Sophos]10
PWS-Zbot.gen.al [McAfee]10
Win32/Zbot.worm.139776 [AhnLab]8
Infostealer.Banker.C [Symantec]7
Trojan.Win32.Zbot [Ikarus]6
Win-Trojan/Zbot.138240 [AhnLab]6
HeurEngine.MaliciousPacker [PC Tools]4
Packed.Generic.232 [Symantec]4
Packed.Win32.Krap [Ikarus]4
Trojan-Spy.Win32.Zbot.aecp [Kaspersky Lab]4
Trojan-Spy.Zbot.YETH [PC Tools]4
Generic PWS.y!byc [McAfee]3
Infostealer [Symantec]3
PWS:Win32/Zbot [Microsoft]3
PWS-Zbot.gen.v [McAfee]3
Trojan.Win32.Scar [Ikarus]3
Trojan-PSW.Generic [PC Tools]3
Win32/IRCBot.worm.variant [AhnLab]3
Generic PWS.y!bgf [McAfee]2
Trojan Horse [Symantec]2
Trojan.Generic [PC Tools]2
Trojan-PSW.Banker [PC Tools]2
Backdoor.Bifrose [PC Tools]1
Backdoor.Bifrose [Symantec]1
Dropper/Malware.127488.D [AhnLab]1
Generic PWS.y!bfv [McAfee]1
Generic PWS.y!bgr [McAfee]1
Generic PWS.y!bhu [McAfee]1
Generic PWS.y!bkt [McAfee]1
Generic PWS.y!bqt [McAfee]1
Generic PWS.y!bui [McAfee]1
Generic PWS.y!bur [McAfee]1
Generic PWS.y!buw [McAfee]1
Generic PWS.y!bvb [McAfee]1
Generic PWS.y!bvz [McAfee]1
Generic PWS.y!bwk [McAfee]1
Generic PWS.y!bxo [McAfee]1
Generic.dx!geu [McAfee]1
Generic.dx!hmb [McAfee]1
Generic.dx!hmq [McAfee]1
Generic.dx!liu [McAfee]1
PWS.Win32 [Ikarus]1
PWS:Win32/Zbot.QU [Microsoft]1
PWS:Win32/Zbot.QV [Microsoft]1
PWS:Win32/Zbot.QY [Microsoft]1
Trojan.Crypt [Ikarus]1
Trojan.Win32.Scar.arfi [Kaspersky Lab]1
Trojan.Win32.Scar.aroe [Kaspersky Lab]1
Trojan.Win32.Scar.aros [Kaspersky Lab]1
Trojan.Win32.Scar.arzx [Kaspersky Lab]1
Trojan.Win32.Scar.autb [Kaspersky Lab]1
Trojan.Win32.Scar.auxg [Kaspersky Lab]1
Trojan.Win32.Scar.aygx [Kaspersky Lab]1
Trojan:Win32/Malagent [Microsoft]1
Trojan-Banker.Win32.Bancos [Ikarus]1
Trojan-Banker.Win32.Bancos.jdg [Kaspersky Lab]1
Trojan-Banker.Win32.Bancos.ltu [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.aebv [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.aefy [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.aeif [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.aekm [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.aeld [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.aezp [Kaspersky Lab]1
Virus.Win32.Cryptor [Ikarus]1
Win-Trojan/Scar.130560 [AhnLab]1
Win-Trojan/ZBot.104960.I [AhnLab]1
Win-Trojan/ZBot.105472.F [AhnLab]1
Win-Trojan/Zbot.106496.I [AhnLab]1
Win-Trojan/ZBot.107008.B [AhnLab]1
Win-Trojan/ZBot.107520.D [AhnLab]1
Win-Trojan/Zbot.111104.C [AhnLab]1
Win-Trojan/Zbot.122020 [AhnLab]1
Win-Trojan/ZBot.123904.B [AhnLab]1
Win-Trojan/Zbot.129024.B [AhnLab]1
Win-Trojan/ZBot.129536.B [AhnLab]1
Win-Trojan/Zbot.130048 [AhnLab]1
Win-Trojan/Zbot.130048.B [AhnLab]1
Win-Trojan/Zbot.130048.F [AhnLab]1
Win-Trojan/Zbot.130048.V [AhnLab]1
Win-Trojan/ZBot.130560.C [AhnLab]1
Win-Trojan/Zbot.130560.G [AhnLab]1
Win-Trojan/Zbot.131072 [AhnLab]1
Win-Trojan/ZBot.131072.G [AhnLab]1
Win-Trojan/Zbot.132096.B [AhnLab]1
Win-Trojan/ZBot.92160.B [AhnLab]1

Mal/EncPk-LE [Sophos] has the following possible countries of origin:
OriginNumber of Incidents
China4
Russian Federation1
Taiwan1

Mal/EncPk-LE [Sophos] is known to be created as:
%System%\sdra64.exe
%Temp%\sdra64.exe
%Windir%\temp\rdl1.tmp.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.