ThreatExpert's Statistics for Win-Trojan/Zbot.81920.C [AhnLab]:

Win-Trojan/Zbot.81920.C [AhnLab] is also known as:

Threat Alias	Number of Incidents
Packed.Generic.232 [Symantec]	2
PWS:Win32/Zbot.gen!R [Microsoft]	2
Spy-Agent.eh [McAfee]	2
Trojan-Spy.Win32.Zbot.gen [Kaspersky Lab]	2
Mal/Zbot-O [Sophos]	1
Troj/Spy-CU [Sophos]	1
Trojan-Spy.Win32.Zbot [Ikarus]	1

Win-Trojan/Zbot.81920.C [AhnLab] is known to be created as:

%System%\sdra64.exe

Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).