The application 1d7b69fe-9686-45b6-8a43-97659dd401d8-5.exe, “Shop_an_Up-1.4 exe” has been detected as adware by 41 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. Accoriding to the detections, it is a variant of Zbot (Zeus), a trojan that attempts to steal confidential information (online credentials, and banking details) from a compromised computer and send it to online criminals via a command-and-control server. While running, it connects to the Internet address ip-184-168-221-36.ip.secureserver.net on port 80 using the HTTP protocol.