Threat Search: 

ThreatExpert's Statistics for Trojan-Spy.Zeus [Ikarus]:

Trojan-Spy.Zeus [Ikarus] is also known as:
Threat AliasNumber of Incidents
Troj/Zbot-HJ [Sophos]8
Infostealer.Banker.C [Symantec]6
PWS:Win32/Zbot.gen!R [Microsoft]6
Trojan-Spy.Win32.Zbot.uut [Kaspersky Lab]6
Win32/IRCBot.worm.variant [AhnLab]4
Mal/Generic-A [Sophos]3
Generic PWS.y [McAfee]2
Mal/Behav-010 [Sophos]2
PWS:Win32/Zbot.UO [Microsoft]2
PWS-Zbot.gen.c [McAfee]2
Trojan-Downloader.Win32.FraudLoad.wfws [Kaspersky Lab]2
Trojan-Spy.Win32.Zbot.ouu [Kaspersky Lab]2
Generic PWS.y!x [McAfee]1
Trojan-PSW.Banker [PC Tools]1
Trojan-Spy.Win32.Zbot.lsx [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.qfo [Kaspersky Lab]1
Trojan-Spy.Win32.Zbot.uqw [Kaspersky Lab]1

Trojan-Spy.Zeus [Ikarus] is known to be created as:
%System%\ntos.exe
%System%\sdra64.exe
%Temp%\dll.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).