Author Topic: Whether "win32:zbot-mkk" it also a false alarm?  (Read 8803 times)

0 Members and 1 Guest are viewing this topic.

krys76

  • Guest
Whether "win32:zbot-mkk" it also a false alarm?
« on: December 03, 2009, 09:03:47 AM »
Whether "win32:zbot-mkk" it also a false alarm?

cromag

  • Guest
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #1 on: December 03, 2009, 09:07:47 AM »
I hope so.  I had "zbot-mkk" report on my computer in addition to the "delf-mzg."  I've updated to the new virus database, but I have not yet completed a full scan.

SafeSurf

  • Guest
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #2 on: December 03, 2009, 09:09:54 AM »
Do you have the updated VPS - 091203-1 downloaded from Avast on your machine yet before doing your scan?

cromag

  • Guest
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #3 on: December 03, 2009, 09:12:29 AM »
If you're asking me, yes.

After updating the virus database I rescanned the "delf-mzg" file that I quarantined.  It came up as "no virus" so I restored it.  By the time I encountered the "zbot-mkk" report I suspected a false positive problem and I was telling Avast! to take no action, so it's still on the computer.

SafeSurf

  • Guest
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #4 on: December 03, 2009, 09:27:03 AM »
I just alerted the mods. about this.   

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #5 on: December 03, 2009, 09:48:35 AM »
Yes, it's the same story.
I've updated the statement thread accordingly: http://forum.avast.com/index.php?topic=51647

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

deathracer

  • Guest
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #6 on: December 03, 2009, 01:40:38 PM »
I seriously thought my computer was infected last night with DELF-MZG adn Zbot-MKK and allowed Avast to delete the reported infected executables.  (Adbobe, Nero, and many more of my programs) When it got to some infections in my Win32 folder, I was expecting post boot problems and sure enough, my computer will not get past the BIOS post now.
I'll be trying a Windows repair install today and if successful a re-install of the now damaged programs.

I'm only posting this as FYI as to the possible impact of this problem on other users.
 

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #7 on: December 03, 2009, 01:48:40 PM »
Even a boot into Safe Mode isn't possible?

We haven't had any reports on Microsoft (operating system) files being affected by the issue, so the system should hopefully boot.


Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

americanwageslave

  • Guest
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #8 on: December 03, 2009, 03:08:41 PM »
I also did a full scan and deleted all files. Before I did the scan I was unable to run multiple programs such as media monkey and peer guardian do to the "virus." After the scan completed it did start Windows successfully. However I am scared to reboot. There were some files that were detected in both windows temporary folder and windows system folder. Perhaps I can post the log later.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #9 on: December 03, 2009, 03:32:11 PM »
So you were deleting the files (as opposed to moving them to the Virus Chest)?
If at first you don't succeed, then skydiving's not for you.

woogiez

  • Guest
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #10 on: December 03, 2009, 03:44:22 PM »
Just as a heads up, I tried putting my DLL's in the chest when the trojan false positive showed up, but I kept getting access denied and delete was the only thing that worked.

americanwageslave

  • Guest
Re: Whether "win32:zbot-mkk" it also a false alarm?
« Reply #11 on: December 03, 2009, 07:57:57 PM »
I deleted as well for the same reason. Repair and move to chest did not work. I can post the log when I get home.