ThreatExpert's Statistics for Trojan:Win32/Zbot.AT [Microsoft]:

Trojan:Win32/Zbot.AT [Microsoft] is also known as:

Threat Alias Number of Incidents NTRootKit-H [McAfee] 2 Troj/Spy-AS [Sophos] 2 Trojan-Spy.Win32.Zbot.dkf [Ikarus] 2 Trojan-Spy.Win32.Zbot.dkf [Kaspersky Lab] 2 TSPY_ZBOT.OJ [Trend Micro] 2 Win32/IRCBot.worm.variant [AhnLab] 2 Backdoor.Paproxy!sd6 [PC Tools] 1 Packed.Generic.187 [Symantec] 1

Trojan:Win32/Zbot.AT [Microsoft] has the following possible country of origin:

Origin Number of Incidents Russian Federation 1

Trojan:Win32/Zbot.AT [Microsoft] is known to be created as:

%System%\ntos.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).