1

http://img209.imageshack.us/img209/5152/zlob1alk8.png

http://img219.imageshack.us/img219/4019/zlob2ajx7.png

2

Well, as you can see, even some bigger players than avast! aren’t detecting it either so no biggie…

3

I’ve already sent one new Zlob sample to avast, which was not detected 2 days ago. wondering how long it would take until avast will detect it… ???

4

There are currently 482 Zlob variants in the virus database, which just shows this is a fast changing trojan so there are going to be times when a new variant get through. One in the virus database is just Win32:Zlob [Trj] not sure if this a form of generic signature trying to cope with new variants.

I trust you sent the sample to avast rather than rely on any reporting from Jotti or VirusTotal.

5

I uploaded the file here: http://rapidshare.com/files/8174558/fn-spyware.zip.html

6

I would have thought it better to send it direct to virus@avast.com zipped and password protected with password in email body and undetected malware in the subject.

7

After today’s update my sample is still not detected, although some new Zlob variants are included. I’ll keep it in a virus chest for a while, as I’m interested how long it would take until file will be detected… :wink:

8

I’m not interested… I’m worried…
Why can’t we get this update delays solved…? :‘( :’(

9

Actually, avast! has already detected one of your Zlob samples but it’s detected during the installation process (don’t do/try it on your machine) or the extraction, not by its installer.

As fas as I know, Zlob has a countless variants, I think they have been released several variants a day, no AV software can detect them all, even AntiVir which has been dedicated themselves to heuristic/generic detection in order to fight against a Zlob trojan variants, I’ve also noticed that some vendors such as AVG has been released a signature for a Zlob trojan variants very very often.