Trojan-Downloader.Win32.Zlob.qz

[biggerbyte]

Trojan-Downloader.Win32.Zlob.qz was detected on my computer by Kaspersky's online scanner, but NOD32 did not catch it, much less remove it.

Anyone know if NOD can not detect such as this and why?

[kjempen]

{QUOTE-> Trojan-Downloader.Win32.Zlob.qz was detected on my computer by Kaspersky's online scanner, but NOD32 did not catch it, much less remove it.

Anyone know if NOD can not detect such as this and why? <-QUOTE}

I suppose you have an up-to-date NOD32 running on your PC (defs v1.1590 (20060610))? I have this trojan (and plenty of variants of it) in my collection. All "Zlob"s in my collection, including this one that you say NOD32 doesn't detect, are all detected by NOD32 here.

EDIT: ecodec.exe is detected as "a variant of Win32/TrojanDownloader.Zlob.PL trojan" by NOD32
Loader.dll is detected as "Win32/TrojanDownloader.Zlob.PJ trojan" by NOD32

Both of these files are labelled as "Trojan-Downloader.Win32.Zlob.qz" by KAV.

[TonyKlein]

Have a look at this thread:

http://www.wilderssecurity.com/showthread.php?t=133089

These are pretty hard to detect for ALL, including on occasion Kaspersky as well...

[proll]

{QUOTE-> Trojan-Downloader.Win32.Zlob.qz was detected on my computer by Kaspersky's online scanner, but NOD32 did not catch it, much less remove it.

Anyone know if NOD can not detect such as this and why? <-QUOTE}
You should find the infected files and send them to Eset(samples@eset.com password:infected)

[ronjor]

Further posts about *Zlob can be posted in this (http://www.wilderssecurity.com/showthread.php?t=133089) thread.