ThreatExpert's Statistics for Troj/Spy-AS [Sophos]:

Troj/Spy-AS [Sophos] is also known as:

Threat Alias Number of Incidents TSPY_ZBOT.OJ [Trend Micro] 4 Backdoor.Paproxy [Symantec] 2 NTRootKit-H [McAfee] 2 PWS:Win32/Zbot.LS [Microsoft] 2 Trojan:Win32/Zbot.AT [Microsoft] 2 Trojan-Spy.Win32.Zbot.dji [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.dkf [Ikarus] 2 Trojan-Spy.Win32.Zbot.dkf [Kaspersky Lab] 2 Win32.Outbreak.UPSRechnung [Ikarus] 2 Win32/IRCBot.worm.variant [AhnLab] 2 Backdoor.Paproxy!sd6 [PC Tools] 1 New Malware.ix [McAfee] 1 Packed.Generic.187 [Symantec] 1 Spy-Agent.bw [McAfee] 1

Troj/Spy-AS [Sophos] has the following possible country of origin:

Origin Number of Incidents Russian Federation 2

Troj/Spy-AS [Sophos] is known to be created as:

%System%\ntos.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).