ThreatExpert's Statistics for PWS.Win32.Zbot.UO [Ikarus]:

PWS.Win32.Zbot.UO [Ikarus] is also known as:

Threat Alias	Number of Incidents
Infostealer.Banker.C [Symantec]	2
Mal/EncPk-CZ [Sophos]	2
PWS:Win32/Zbot.UO [Microsoft]	2
PWS-Zbot.gen.c [McAfee]	2
Trojan-Spy.Win32.Zbot.fgx [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.fmi [Kaspersky Lab]	2
Win32/IRCBot.worm.variant [AhnLab]	2
Generic PWS.y!dy [McAfee]	1
Mal/Generic-A [Sophos]	1
Trojan-Spy.Zbot!sd6 [PC Tools]	1

PWS.Win32.Zbot.UO [Ikarus] is known to be created as:

%System%\ntos.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).