W32/Zlob.cs

W32/Zlob.cs

Type: Worm
Size: 29184 Byte
System Affected: Windows 2000,XP,NT,....
Others Known As:

Trojan-Downloader.Win32.Zlob.aos (kaspersky)

W32/Zlob.ZF (F-Prot)

Characteristics :

1) Creates the following registry keys :

◊HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\

isamonitor.exe = [Current Path]\isamonitor.exe

2) Create the following files :

◊ [Current Path]\isaddon.dll
◊ [Current Path]\isamini.exe