ThreatExpert's Statistics for PWS:Win32/Zbot.J [Microsoft]:

PWS:Win32/Zbot.J [Microsoft] is also known as:

Threat Alias	Number of Incidents
Trojan-Spy.Win32.Zbot.gen [Kaspersky Lab]	112
Infostealer.Banker.C [Symantec]	70
Trojan-Spy.Win32.Zbot [Ikarus]	53
Mal/EncPk-CZ [Sophos]	48
Infostealer [Symantec]	36
Mal/WaledPak-A [Sophos]	22
Generic PWS.y [McAfee]	21
Mal/Zbot-O, Mal/EncPk-CZ [Sophos]	19
Win32/IRCBot.worm.variant [AhnLab]	18
PWS.Win32 [Ikarus]	14
Troj/Zbot-DX [Sophos]	14
Trojan-Spy.Zbot!sd6 [PC Tools]	11
Troj/Zbot-EH [Sophos]	9
Trojan-Spy.Win32.Zbot.qkr [Kaspersky Lab]	9
Packed.Generic.233 [Symantec]	8
PWS-Zbot [McAfee]	8
Mal/EncPk-HZ [Sophos]	7
Troj/Agent-JJP [Sophos]	6
TROJ_FAKEALE.SMB [Trend Micro]	6
Trojan Horse [Symantec]	6
Trojan-Spy.Banker!sd6 [PC Tools]	6
Win-Trojan/Agent.84480.CM [AhnLab]	6
Trojan-PSW.Banker [PC Tools]	5
Trojan-Spy.Zbot [Ikarus]	5
Win-Trojan/Obfuscator.70144.B [AhnLab]	5
Downloader-BON [McAfee]	4
FakeAlert-FH [McAfee]	4
Generic Dropper.ke [McAfee]	4
HeurEngine.MaliciousPacker [PC Tools]	4
Mal/EncPk-HP [Sophos]	4
Mal/EncPk-IV [Sophos]	4
Mal/EncPk-IV, Mal/EncPk-IF [Sophos]	4
Mal/Zbot-Q [Sophos]	4
Packed.Generic.232 [Symantec]	4
Spam-Mailbot.m [McAfee]	4
Troj/Agent-JHL [Sophos]	4
Troj/Agent-JIV [Sophos]	4
Trojan.Win32.Agent.bxge [Kaspersky Lab]	4
Trojan-Spy.Win32.Zbot.aack [Kaspersky Lab]	4
Trojan-Spy.Win32.Zbot.rev [Kaspersky Lab]	4
Trojan-Spy.Win32.Zbot.tem [Kaspersky Lab]	4
Win-Trojan/Zbot.73728.B [AhnLab]	4
Win-Trojan/Zbot.76288.D [AhnLab]	4
Win-Trojan/Zbot.79360 [AhnLab]	4
Spy-Agent.bw [McAfee]	3
Win-Trojan/Zbot.59392.B [AhnLab]	3
Generic Dropper.kj [McAfee]	2
Infostealer.Bancos [Symantec]	2
Mal/EncPk-HH [Sophos]	2
Mal/EncPk-IB [Sophos]	2
Mal/EncPk-IF [Sophos]	2
Mal/EncPk-MP, Mal/EncPk-IF [Sophos]	2
Mal/FakeAV-BT, Mal/EncPk-NP [Sophos]	2
Mal/FakeAV-BX [Sophos]	2
Mal/Generic-A [Sophos]	2
Mal/WaledPak-D [Sophos]	2
not-a-virus:FraudTool.Win32.SpywareProtect2009 [Ikarus]	2
Packed.Generic.221 [Symantec]	2
Packed.Win32.Krap.i [Kaspersky Lab]	2
Trojan.Win32.Agent [Ikarus]	2
Trojan-Downloader.Win32.Small [Ikarus]	2
Trojan-Downloader.Win32.Small.jlc [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.aakh [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.aavy [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.rxd [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.tgr [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.xav [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.xcy [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.zpx [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.zup [Kaspersky Lab]	2
Trojan-Spy.Zbot.YETH [PC Tools]	2
Win-Trojan/Zbot.61440.H [AhnLab]	2
Win-Trojan/Zbot.61952.C [AhnLab]	2
Win-Trojan/Zbot.61952.E [AhnLab]	2
Win-Trojan/Zbot.61952.F [AhnLab]	2
Win-Trojan/Zbot.66048.E [AhnLab]	2
Win-Trojan/Zbot.66048.F [AhnLab]	2
Win-Trojan/Zbot.67584.S [AhnLab]	2
Win-Trojan/Zpack.76288 [AhnLab]	2
Generic PWS.y!a [McAfee]	1
Generic PWS.y!dw [McAfee]	1
Generic PWS.y!p [McAfee]	1
Mal/Generic-A, Mal/EncPk-HZ [Sophos]	1
Mal/Generic-A, Mal/Zbot-O, Mal/EncPk-CZ [Sophos]	1
Trojan.Win32.Agent.bxlf [Kaspersky Lab]	1
Trojan-Spy.Agent [PC Tools]	1
Trojan-Spy.Win32.Zbot.qkq [Kaspersky Lab]	1
Vundo [McAfee]	1
Win-Trojan/Zbot.61952.J [AhnLab]	1

PWS:Win32/Zbot.J [Microsoft] has the following possible country of origin:

Origin		Number of Incidents
	Russian Federation	15

PWS:Win32/Zbot.J [Microsoft] is known to be created as:

%ProgramFiles%\linkedtricks\linkedtricks.exe

%System%\sdra64.exe

%Temp%\6_ldr3.exe

%Temp%\6_ldry3.exe

%Temp%\adv.exe

%Temp%\tmp.exe

%Temp%\tmp1.exe

Notes:

%ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).