Troj/Bckdr-ZLA is a backdoor Trojan for the Windows platform.

Troj/Bckdr-ZLA has the capabilities to:
- download code into system folder
- flood remote hosts in DDos attacks

When first run Troj/Bckdr-ZLA copies itself to the Windows system folder.

Troj/Bckdr-ZLA is registered as a new system driver service named "WindowsRemote", with a display name of "Windows Accounts Driver" and a startup type of SERVICE_AUTO_START, so that it is started automatically during system startup. The Trojan creates registry entries.

More information can be found at this Sophos page.