Troj/Zbot-LM is a Trojan for the Windows platform.
Troj/Zbot-LM includes functionality to run automatically.
When Troj/Zbot-LM is installed the following files are created:
<System>\sdra64.exe
<Temp>\incognito.exe
The following registry entry is changed to run sdra64.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit
<System>\userinit.exe,<System>\sdra64.exe,