ThreatExpert's Statistics for Troj/Zbot-HJ [Sophos]:

Troj/Zbot-HJ [Sophos] is also known as:

Threat Alias Number of Incidents Trojan-Spy.Zeus [Ikarus] 8 Trojan-Spy.Win32.Zbot.uut [Kaspersky Lab] 6 PWS:Win32/Zbot.gen!W [Microsoft] 3 PWS:Win32/Zbot.gen!R [Microsoft] 2 Suspicious.MH690 [Symantec] 2 Trojan-Banker.Win32.Bancos.hoh [Kaspersky Lab] 2 Trojan-Downloader.Win32.FraudLoad.wfws [Kaspersky Lab] 2

Troj/Zbot-HJ [Sophos] is known to be created as:

%System%\sdra64.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).