ThreatExpert's Statistics for Spy-Agent.bw.gen.e [McAfee]:

Spy-Agent.bw.gen.e [McAfee] is also known as:

Threat Alias	Number of Incidents
Trojan-Spy.Win32.Zbot.gen [Kaspersky Lab]	364
PWS:Win32/Zbot.gen!R [Microsoft]	235
Packed.Generic.232 [Symantec]	180
Mal/Zbot-O [Sophos]	165
HeurEngine.MaliciousPacker [PC Tools]	154
PWS:Win32/Zbot.gen!W [Microsoft]	110
Mal/Behav-353, Mal/EncPk-LE [Sophos]	94
Trojan-Spy.Win32.Zbot [Ikarus]	89
Infostealer.Banker.C [Symantec]	86
TrojanSpy.ZBot.Gen!Pac.4 [PC Tools]	81
Cryp_Pai-5 [Trend Micro]	77
Mal/EncPk-LE, Mal/Behav-353 [Sophos]	44
Trojan.Zbot [PC Tools]	39
Trojan.Zbot!gen3 [Symantec]	33
Trojan-PSW.Banker [PC Tools]	29
Mal/Behav-353 [Sophos]	21
Mal/Generic-A [Sophos]	18
Win32/IRCBot.worm.variant [AhnLab]	11
PWS:Win32/Zbot.gen!E [Microsoft]	8
Mal/EncPk-KD [Sophos]	7
Mal/Generic-A, Mal/Zbot-O [Sophos]	7
TSPY_ZBOT.AI [Trend Micro]	6
Trojan-Spy.Zbot [Ikarus]	5
Infostealer [Symantec]	4
Infostealer.Notos!gen [Symantec]	4
PWS:Win32/Zbot.UB [Microsoft]	4
Troj/Zbot-T [Sophos]	4
Trojan.Zbot [Symantec]	4
Trojan-Spy.Win32.Zbot.aadz [Kaspersky Lab]	4
Trojan-Spy.Win32.Zbot.aazz [Kaspersky Lab]	4
Trojan-Spy.Win32.Zbot.btz [Kaspersky Lab]	4
TrojanSpy.Zbot.HE [PC Tools]	4
Virus.Win32.Zbot [Ikarus]	4
Win32/Ircbot.worm.variant [AhnLab]	4
Infostealer.Banker.E [Symantec]	2
Mal/Dorf-F [Sophos]	2
PWS.Win32 [Ikarus]	2
PWS:Win32/Zbot [Microsoft]	2
Troj/QakBot-H [Sophos]	2
TROJ_SMALL.FAF [Trend Micro]	2
TROJ_ZBOT.FG [Trend Micro]	2
TROJ_ZBOT.FM [Trend Micro]	2
TROJ_ZBOT.FV [Trend Micro]	2
TROJ_ZBOT.GE [Trend Micro]	2
TROJ_ZBOT.HL [Trend Micro]	2
TROJ_ZBOT.HS [Trend Micro]	2
TROJ_ZBOT.JJ [Trend Micro]	2
TROJ_ZBOT.JK [Trend Micro]	2
TROJ_ZBOT.LV [Trend Micro]	2
TROJ_ZBOT.MB [Trend Micro]	2
TROJ_ZBOT.NG [Trend Micro]	2
Trojan.Win32.Zbot [Ikarus]	2
Trojan.Zbot!gen2 [Symantec]	2
Trojan-PSW.Generic [PC Tools]	2
Trojan-Spy.Win32.Zbot.aaof [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.aaro [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.abab [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.abio [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.blh [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.bua [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.bwg [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.bwk [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.cbd [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.dga [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.wcb [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.wrp [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.wvm [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.xdk [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.xet [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.xez [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.yyj [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.zot [Kaspersky Lab]	2
Trojan-Spy.Win32.Zbot.zvy [Kaspersky Lab]	2
Trojan-Spy.Zbot!sd6 [PC Tools]	2
TrojanSpy.Zbot.GM [PC Tools]	2
TrojanSpy.ZBot.GU [PC Tools]	2
TrojanSpy.Zbot.HC [PC Tools]	2
TrojanSpy.Zbot.HK [PC Tools]	2
TSPY_AGENT.POA [Trend Micro]	2
TSPY_ZBOT.IQ [Trend Micro]	2
TSPY_ZBOT.KF [Trend Micro]	2
TSPY_ZBOT.KI [Trend Micro]	2
Win-Trojan/Zbot.95744.I [AhnLab]	2
Mal/Generic-A, Mal/Behav-353, Mal/EncPk-LE [Sophos]	1
Troj/Agent-LEN [Sophos]	1
Troj/Agent-LHB [Sophos]	1
Troj/Zbot-IC [Sophos]	1
TROJ_ZBOT.FQ [Trend Micro]	1
TROJ_ZBOT.KM [Trend Micro]	1
Trojan-Spy.Notos!sd6 [PC Tools]	1
Trojan-Spy.Zbot [PC Tools]	1
Trojan-Spy.Zbot!sd5 [PC Tools]	1
TrojanSpy.Zbot.GO [PC Tools]	1
TrojanSpy.ZBot.GT [PC Tools]	1
TSPY_ZBOT.KA [Trend Micro]	1
TSPY_ZBOT.KP [Trend Micro]	1
TSPY_ZBOT.LU [Trend Micro]	1
Win-Trojan/Malware.89088.K [AhnLab]	1
Win-Trojan/Zbot.78848.J [AhnLab]	1
Win-Trojan/Zbot.79360.E [AhnLab]	1

Spy-Agent.bw.gen.e [McAfee] has the following possible countries of origin:

Origin		Number of Incidents
	Italy	1
	Spain	1

Spy-Agent.bw.gen.e [McAfee] is known to be created as:

%System%\ntos.exe

%System%\sdra64.exe

%Temp%\game.exe

%Temp%\q2.exe

%Temp%\qlm6svdchu.exe

%Temp%\svchost.exe

%Temp%\temp.exe

%Temp%\tmp2.exe

%Temp%\uvrvggawt3.exe

%Templates%\winupdcenter.exe

c:\dropped.exe

Notes:

%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
%Templates% is a variable that refers to the file system directory that serves as a common repository for document templates. A typical path is C:\Documents and Settings\[UserName]\Templates.