avast! unable to detect Zlob

system · 2006-12-19T09:14:41.000Z

http://img209.imageshack.us/img209/5152/zlob1alk8.png

http://img219.imageshack.us/img219/4019/zlob2ajx7.png

RejZoR · 2006-12-19T10:23:18.000Z

Well, as you can see, even some bigger players than avast! aren’t detecting it either so no biggie…

YLAP · 2006-12-19T10:37:31.000Z

I’ve already sent one new Zlob sample to avast, which was not detected 2 days ago. wondering how long it would take until avast will detect it… ???

DavidR · 2006-12-19T13:44:47.000Z

There are currently 482 Zlob variants in the virus database, which just shows this is a fast changing trojan so there are going to be times when a new variant get through. One in the virus database is just Win32:Zlob [Trj] not sure if this a form of generic signature trying to cope with new variants.

I trust you sent the sample to avast rather than rely on any reporting from Jotti or VirusTotal.

system · 2006-12-19T19:53:30.000Z

DavidR post:4:

I trust you sent the sample to avast rather than rely on any reporting from Jotti or VirusTotal.

I uploaded the file here: http://rapidshare.com/files/8174558/fn-spyware.zip.html

DavidR · 2006-12-19T20:24:45.000Z

I would have thought it better to send it direct to virus@avast.com zipped and password protected with password in email body and undetected malware in the subject.

YLAP · 2006-12-19T20:50:55.000Z

After today’s update my sample is still not detected, although some new Zlob variants are included. I’ll keep it in a virus chest for a while, as I’m interested how long it would take until file will be detected…

Lisandro · 2006-12-20T00:39:37.000Z

=YLAP= post:7:

I’m interested how long it would take until file will be detected…

I’m not interested… I’m worried…
Why can’t we get this update delays solved…? :‘( :’(

system · 2006-12-20T01:14:16.000Z

Actually, avast! has already detected one of your Zlob samples but it’s detected during the installation process (don’t do/try it on your machine) or the extraction, not by its installer.

As fas as I know, Zlob has a countless variants, I think they have been released several variants a day, no AV software can detect them all, even AntiVir which has been dedicated themselves to heuristic/generic detection in order to fight against a Zlob trojan variants, I’ve also noticed that some vendors such as AVG has been released a signature for a Zlob trojan variants very very often.

Announcements