POSSIBLE_ZLOB

This is the Trend Micro detection for suspicious files that manifest behavior and characteristics similar to known ZLOB variants.

To view sample detailed analyses of ZLOB variants, refer to the following links:

• TROJ_ZLOB.ARV
• TROJ_ZLOB.ANV

More descriptions of ZLOB variants can be found here.

If your Trend Micro product detects a file under this detection name, do not execute the file. Delete it immediately especially if it came from an untrusted or an unknown source (e.g., a Web site of doubtful nature). However, if you have reason to believe that the detected file is non-malicious, you can submit a sample for analysis. Detailed analysis will be done on submitted samples, and corresponding removal instructions will be provided, if necessary.

To submit files, please refer to the Solution section.

Related Items