avast! unable to detect Zlob

http://img209.imageshack.us/img209/5152/zlob1alk8.png

http://img219.imageshack.us/img219/4019/zlob2ajx7.png

Well, as you can see, even some bigger players than avast! aren’t detecting it either so no biggie…

I’ve already sent one new Zlob sample to avast, which was not detected 2 days ago. wondering how long it would take until avast will detect it… ???

There are currently 482 Zlob variants in the virus database, which just shows this is a fast changing trojan so there are going to be times when a new variant get through. One in the virus database is just Win32:Zlob [Trj] not sure if this a form of generic signature trying to cope with new variants.

I trust you sent the sample to avast rather than rely on any reporting from Jotti or VirusTotal.

I uploaded the file here: http://rapidshare.com/files/8174558/fn-spyware.zip.html

I would have thought it better to send it direct to virus@avast.com zipped and password protected with password in email body and undetected malware in the subject.

After today’s update my sample is still not detected, although some new Zlob variants are included. I’ll keep it in a virus chest for a while, as I’m interested how long it would take until file will be detected… :wink:

I’m not interested… I’m worried…
Why can’t we get this update delays solved…? :‘( :’(

Actually, avast! has already detected one of your Zlob samples but it’s detected during the installation process (don’t do/try it on your machine) or the extraction, not by its installer.

As fas as I know, Zlob has a countless variants, I think they have been released several variants a day, no AV software can detect them all, even AntiVir which has been dedicated themselves to heuristic/generic detection in order to fight against a Zlob trojan variants, I’ve also noticed that some vendors such as AVG has been released a signature for a Zlob trojan variants very very often.