TSPY_ZBOT.AXU can be downloaded from a scam website and drops a copy of NTOS.EXE on the victims computer. TSPY_ZBOT.AXU also modifies registry entries to run itself when Windows is started.

 Alias: -

 Damage Level: Low

 Systems Affected: Windows