Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 23 September 2005 22:27:53 (GMT) |
| Last updated | 11 October 2005 11:01:19 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Zlob-AO is a Trojan for the Windows platform.
Troj/Zlob-AO attempts to download further malicious code.
The Trojan drops a component in the Windows system folder under a randomly generated name beginning 'ld'.
Troj/Zlob-AO may attempt to stealth itself by injecting code into the process winlogon.exe.
The following registry entry is created in order to run the Trojan on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run
wininet.dll
mscornet.exe
