Win32/Zlob is a family of Trojans that modify Internet Explorer settings, redirect the default internet search and home pages, and attempt to download and execute malicious software from the Internet.

TrojanDownloader:Win32/Zlob.gen!BL is a generic detection for a trojan downloader member of the Zlob family. It installs a BHO (Browser Helper Object) in the system. It may also modify the default browser search engine to redirect searches to a certain web site.

TrojanDownloader:Win32/Zlob.gen!AD is generic detection for a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.

This particular component is used to change the affected user's Internet Explorer Start page.

TrojanDownloader:Win32/Zlob.gen!AX is generic detection for a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.

 

This particular component may attempt to download unwanted software.

TrojanDownloader:Win32/Zlob.gen!GW is a generic detection for a trojan component of the greater Win32/Zlob malware family.

TrojanDownloader:Win32/Zlob.gen!AV is generic detection for a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.

TrojanDownloader:Win32/Zlob.gen!AY is a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component malware family that modifies Internet Explorer's settings, may alter default Internet search page and home page, and attempt to download and execute arbitrary files to introduce additional malicious software.

TrojanDownloader:Win32/Zlob.gen!L is a generic detection of a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software).

 

The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.

TrojanDownloader:Win32/Zlob.BBD is a detection for malware that injects code into the Internet Explorer process to download and execute additional malware. As of this writing, the downloaded files are not accessible.

TrojanDownloader:Win32/Zlob.gen!AA is generic detection for a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.

TrojanDownloader:Win32/Zlob.gen!N is generic detection for a variant of a large Trojan family that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). This Trojan attempts to retrieve a file named VideoAccessCodec.ocx from a remote Web site. This file is detected as TrojanDownloader:Win32/Zlob.gen!K.

TrojanDownloader:Win32/Zlob.gen!P is generic detection for a component of Trojan:Win32/Zlob. This Trojan family displays advertisements and receives updates from a remote Web site. In some cases, Trojan:Win32/Zlob displays false warnings of malware infections, designed to encourage users to download rogue security applications or additional malicious files.

TrojanDownloader:Win32/Zlob.gen!A is a family of Trojan programs. Variants of the Zlob family modify Internet Explorer's settings, redirect the default internet search page and home page, and attempt to download and execute malicious software from the Internet.

TrojanDownloader:Win32/Zlob.ZWU is a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.

 

This particular component is installed as a DLL. This trojan may be distributed with other components such as Adware:Win32/Vapsup, Trojan:Win32/Zlob.gen!H and Trojan:Win32/Small.ZZB.

TrojanDownloader:Win32/Zlob.ZWC is generic detection for an ActiveX control component of the Win32/Zlob malware family.

 

Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files. Win32/Zlob is associated with rogue security programs that display misleading warnings, identifying non-existent malware infections.

TrojanDownloader:Win32/Zlob.gen is generic detection for the Zlob family of Trojan downloaders. Variants of the Zlob family modify Internet Explorer's settings, redirect the default internet search page and home page, and attempt to download and execute malicious software from the Internet.

TrojanDownloader:Win32/Zlob.CCA is a generic detection of a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software).

 

The Win32/Zlob family is associated with rogue security programs that display misleading warnings regarding non-existent malware installations or infections. Once installed, Win32/Zlob deceives users by displaying alerts, and similar messages that claim that the machine is infected by malware and spyware. It then displays links to purchase rogue Antispyware products. 

The TrojanDownloader:Win32/Zlob.CCA detection is specific to a DLL component from a Win32/Zlob installation. The component is responsible for displaying  fake alerts and messages claiming that the user's system is infected with spyware.

TrojanDownloader:Win32/Zlob.APM is a generic detection for the DLL component of the TrojanDownloader:Win32/Zlob family, a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). The TrojanDownloader:Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.

TrojanDownloader:Win32/Zlob.gen!AL is generic detection for a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software). The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.