Author Topic: Strange behaviour with web shield and VBS-Zulu FP?  (Read 6278 times)

0 Members and 1 Guest are viewing this topic.

Jarmo P

  • Guest
Strange behaviour with web shield and VBS-Zulu FP?
« on: October 02, 2006, 11:30:00 PM »

mauserme

  • Guest
Re: Strange behaviour with web shield and VBS-Zulu FP?
« Reply #1 on: October 03, 2006, 01:35:23 AM »
I got the same alert about VBS-Zulu (Virus/Worm) when I first went to the web site and on 2 refreshes.  After that no more warnings.  Its seems to be related to the link at the bottom left corner about validating with Windows Genuine advantage.

I tested this with avast! home on Avant Browser (an IE shell).

EDIT:  I just noticed the link changes with every refresh so the one I mentioned above is not the offender.  Its the three that were not displayed that caused the alert.
« Last Edit: October 03, 2006, 01:38:23 AM by mauserme »

hlecter

  • Guest
Re: Strange behaviour with web shield and VBS-Zulu FP?
« Reply #2 on: October 03, 2006, 10:17:20 AM »
Here are my Avast log details after visiting the site:

02.10.2006 23:25:53   SYSTEM   1008   Sign of "VBS:Zulu" has been found in "http:  //rad.microsoft.com/ADSAdClient31.dll?GetAd=&PG=CMSDLO&SC=F3&AP=1164" file.
 
02.10.2006 23:33:51   SYSTEM   1008   Sign of "VBS:Zulu" has been found in "http:  //rad.microsoft.com/ADSAdClient31.dll?GetAd=&PG=CMSDLO&SC=F3&AP=1164" file. 

0640-0 virusdefs.

Can't reproduce it today with same VPS.

perplexed

  • Guest
Re: Strange behaviour with web shield and VBS-Zulu FP?
« Reply #3 on: October 09, 2006, 04:54:25 PM »
I had a similar experience, and posted here: http://forum.avast.com/index.php?topic=24059.new;topicseen#new