Threat Search: 

ThreatExpert's Statistics for Mal/Zbot-G [Sophos]:

Mal/Zbot-G [Sophos] is also known as:
Threat AliasNumber of Incidents
Infostealer.Banker.C [Symantec]2
Trojan-Spy.Win32.Zbot.idq [Kaspersky Lab]2
TrojanSpy:Win32/Zbot.gen!C [Microsoft]2
Virus.Win32.Enteos [Ikarus]2

Mal/Zbot-G [Sophos] has the following possible country of origin:
OriginNumber of Incidents
Russian Federation3

Mal/Zbot-G [Sophos] is known to be created as:
%System%\twex.exe
%System%\twext.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).