ThreatExpert's Statistics for Troj/PWS-ATH [Sophos]:

Troj/PWS-ATH [Sophos] is also known as:

Threat Alias Number of Incidents PWS:Win32/Zbot.gen!B [Microsoft] 4 Infostealer.Banker.C [Symantec] 2 Trojan.Win32.FraudPack.gen [Kaspersky Lab] 2 TSPY_ZBOT.MCS [Trend Micro] 2 Spy-Agent.cf [McAfee] 1 Trojan.Win32.FraudPack [Ikarus] 1

Troj/PWS-ATH [Sophos] has the following possible country of origin:

Origin Number of Incidents Russian Federation 3

Troj/PWS-ATH [Sophos] is known to be created as:

%System%\oembios.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).