Unusual outbound traffic spikes (indicative of DDoS activity).

Can participate in coordinated floods (TCP, UDP, HTTP).

Use a reputable antivirus or the Microsoft Safety Scanner to remove the zip and its extracted components.

Immediately disconnect the infected machine from the network.