Thanks, I will take a look at that one. I have several images of disks/memorys of tests with (what the scanners call) Spyeye and Zeus. I can compare them. The malware scanners don't use a common naming scheme which confuses things. Question to MHL, what criteria or marker do you use to classify SpyEye, Zues and Silent Banker? And, if you have a criteria to identify the new version in the article below, I would love to know what it is. Best, Mike