Zeus Malware Details:
---------------------

Normaly the trojan is located on the system at:

Variant 1
File 	Description
C:\WINDOWS\system32\ntos.exe 	        Trojan binary
C:\WINDOWS\system32\wsnpoem\audio.dll 	Contains the stolen data
C:\WINDOWS\system32\wsnpoem\video.dll 	Contains the encrypted config

Variant 2
File 	Description
C:\WINDOWS\system32\oembios.exe 	            Trojan binary
C:\WINDOWS\system32\sysproc64\sysproc86.sys 	Contains the stolen data
C:\WINDOWS\system32\sysproc64\sysproc32.sys 	Contains the encrypted config

Variant 3
File 	Description
C:\WINDOWS\system32\twext.exe 	        Trojan binary
C:\WINDOWS\system32\twain_32\local.ds 	Contains the stolen data
C:\WINDOWS\system32\twain_32\user.ds 	Contains the encrypted config

Variant 4
File 	Description
C:\WINDOWS\system32\sdra64.exe 	        Trojan binary
C:\WINDOWS\system32\lowsec\local.ds 	Contains the stolen data
C:\WINDOWS\system32\lowsec\user.ds 	    Contains the encrypted config