The executable svchost.exe has been detected as malware by 35 anti-virus scanners. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘MicroUpdate’. Accoriding to the detections, it is a variant of Zbot (Zeus), a trojan that attempts to steal confidential information (online credentials, and banking details) from a compromised computer and send it to online criminals via a command-and-control server. Although this file uses the name svchost.exe, this is NOT the Windows SvcHost (Service Host) distributed with the OS.