ThreatExpert's Statistics for TSPY_ZBOT.MCS [Trend Micro]:

TSPY_ZBOT.MCS [Trend Micro] is also known as:

Threat Alias Number of Incidents PWS:Win32/Zbot.gen!B [Microsoft] 4 Infostealer [Symantec] 2 Infostealer.Banker.C [Symantec] 2 PWS:Win32/Zbot.gen!P [Microsoft] 2 PWS:Win32/Zbot.MS [Microsoft] 2 Troj/PWS-ATH [Sophos] 2 Trojan.Win32.FraudPack.gen [Kaspersky Lab] 2 Trojan.Zlob [PC Tools] 2 Trojan.Zlob [Symantec] 2 Trojan-Spy.Win32.Zbot.etn [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.eub [Kaspersky Lab] 2 Trojan-Spy.Win32.Zbot.wbv [Kaspersky Lab] 2 Win32/IRCBot.worm.variant [AhnLab] 2 Generic PWS.y [McAfee] 1 Generic PWS.y!sj [McAfee] 1 Mal/EncPk-CZ [Sophos] 1 Mal/Generic-A [Sophos] 1 Spy-Agent.cf [McAfee] 1 Troj/Zbot-AM [Sophos] 1 Trojan.Win32.FraudPack [Ikarus] 1 Trojan-Spy.Win32.Zbot [Ikarus] 1 Trojan-Spy.Zbot!sd6 [PC Tools] 1

TSPY_ZBOT.MCS [Trend Micro] has the following possible country of origin:

Origin Number of Incidents Russian Federation 3

TSPY_ZBOT.MCS [Trend Micro] is known to be created as:

%System%\oembios.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).