The executable tytak.exe, “Musrukafa Visatl Studie 2010” has been detected as malware by 8 anti-virus scanners. It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time. Accoriding to the detections, it is a variant of Zbot (Zeus), a trojan that attempts to steal confidential information (online credentials, and banking details) from a compromised computer and send it to online criminals via a command-and-control server. While running, it connects to the Internet address float.871.bm-impbus.prod.ams1.adnexus.net on port 80 using the HTTP protocol.