TROJ_ZBOT.MEK

October 07, 2012
 Analysis by: JessaD
 PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted: Yes

  • In the wild: Yes

  OVERVIEW

This Trojan checks for the presence of the following processes which are related to Outpost Personal Firewall and ZoneLabs Firewall Client. It terminates if either of the said processes exist. This is to ensure that it runs uninterrupted.

  TECHNICAL DETAILS

File Size:

0 bytes

File Type:

PE

Memory Resident:

Yes

Initial Samples Received Date:

30 Dec 2009

Other Details

This Trojan checks for the presence of the following processes, which are related to Outpost Personal Firewall and ZoneLabs Firewall Client: