Troj/Bancos-D is a Trojan which copies itself into the Windows System folder as ZAZ.EXE and sets the following registry entries so that it executes every time that the computer restarts:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\winzip
= C:\<Windows System>\ZAZ.EXE
HKCU\Software\WinRAR SFX\C%%Windows%system
= C:\<Windows System>\