Troj/Zlob-ZP is a Trojan for the Windows platform.
Troj/Zlob-ZP attempts to modify DNS settings on the computer.
Troj/Zlob-ZP is a Trojan for the Windows platform.
Troj/Zlob-ZP attempts to modify DNS settings on the computer.
When first run Troj/Zlob-ZP creates the file <System>\<random>.exe. This file may be hidden from normal viewing by the stealth functionality of Troj/Zlob-ZP.
The following registry entry is changed to run <random>.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
System
<random>.exe