Threat Search: 

ThreatExpert's Statistics for TSPY_BANKRYPT.X [Trend Micro]:

TSPY_BANKRYPT.X [Trend Micro] is also known as:
Threat AliasNumber of Incidents
PWS-Banker.gen.bw [McAfee]96
TrojanSpy.Bancos.AAM [PC Tools]94
TrojanSpy.ZBot.Gen!Pac.3 [PC Tools]85
Infostealer.Banker.C [Symantec]73
Trojan-Spy.Win32.Zbot.zr [Kaspersky Lab]57
Trojan-Spy.Win32.Bancos.aam [Ikarus]55
Win-Trojan/Bancos.40960.Z [AhnLab]53
Mal/Behav-045, Mal/Zbot-A [Sophos]52
Trojan-Spy.Win32.Bancos.aam [Kaspersky Lab]46
Spy-Agent.cj.gen [McAfee]41
Spy-Agent.bw.gen.b [McAfee]36
Bloodhound.Unknown [Symantec]26
Trojan-PSW.Win32.Zbot.ch [Kaspersky Lab]18
TrojanSpy:Win32/Zbot.gen!C [Microsoft]15
Trojan-Spy.Win32.Zbot.adj [Kaspersky Lab]11
Packed.Win32.Tibs.dc [Kaspersky Lab]8
Spy-Agent.bw [McAfee]8
Spy-Agent.bw.gen [McAfee]6
Spy-Agent.cj.gen.b [McAfee]6
Trojan.PWS.Zbot.D [PC Tools]6
Trojan-Spy.Win32.Zbot.vb [Kaspersky Lab]6
TrojanSpy.ZBot.Z [PC Tools]6
Mal/Zbot-A [Sophos]5
Mal/Behav-066, Mal/Zbot-A [Sophos]4
PWS:Win32/Zbot.WE [Microsoft]4
Spy-Agent.cj.gen.i [McAfee]4
TrojanSpy.Agent.WEQ [PC Tools]4
Trojan-Spy.Win32.Zbot.vb [Ikarus]4
Generic PWS.l [McAfee]3
Win32/IRCBot.worm.variant [AhnLab]3
Infostealer.Notos!gen [Symantec]2
Mal/Zbot-A, Mal/Behav-045 [Sophos]2
PWS:Win32/Bankrypt.gen [Microsoft]2
PWS:Win32/Zbot.AF [Microsoft]2
PWS:Win32/Zbot.LL [Microsoft]2
Spy-Agent.bw.gen.a [McAfee]2
Spy-Agent.cj.gen.l [McAfee]2
Trojan-PSW.Win32.Zbot.c [Kaspersky Lab]2
Trojan-Spy.Bancos!sd5 [PC Tools]2
TrojanSpy.Bancos.CJX [PC Tools]2
TrojanSpy.Broker.A [PC Tools]2
Trojan-Spy.Win32.Bancos.aco [Kaspersky Lab]2
Trojan-Spy.Win32.Bancos.bay [Kaspersky Lab]2
Trojan-Spy.Win32.Broker.p [Kaspersky Lab]2
Trojan-Spy.Win32.Zbot.a [Kaspersky Lab]2
Trojan-Spy.Win32.Zbot.dy [Ikarus]2
Trojan-Spy.Win32.Zbot.dy [Kaspersky Lab]2
Trojan-Spy.Win32.Zbot.jn [Kaspersky Lab]2
Trojan-Spy.Win32.Zbot.n [Kaspersky Lab]2
Trojan-Spy.Win32.Zbot.xe [Kaspersky Lab]2
Generic.dx [McAfee]1
Mal/Behav-066, Mal/Behav-045, Mal/Zbot-A [Sophos]1
Mal/Behav-066, Mal/Zbot-A, Mal/Behav-045 [Sophos]1
Mal/Zbot-A, Mal/Behav-045, Mal/Behav-066 [Sophos]1
Mal/Zbot-A, Mal/Behav-066 [Sophos]1
New Malware.gx [McAfee]1
TrojanSpy.Bancos.CHI [PC Tools]1
TSPY_BANCOS.DVZ [Trend Micro]1

TSPY_BANKRYPT.X [Trend Micro] is known to be created as:
%System%\ntos.exe
%Temp%\decrypted.exe
%Temp%\ldr.exe
%Temp%\temp.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).