Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Jarmo P on October 02, 2006, 11:30:00 PM

Title: Strange behaviour with web shield and VBS-Zulu FP?
Post by: Jarmo P on October 02, 2006, 11:30:00 PM

Read from dslreports security forum:
http://www.dslreports.com/forum/remark,17013740~mode=flat#17015199

Jarmo

Title: Re: Strange behaviour with web shield and VBS-Zulu FP?
Post by: mauserme on October 03, 2006, 01:35:23 AM

I got the same alert about VBS-Zulu (Virus/Worm) when I first went to the web site and on 2 refreshes.  After that no more warnings.  Its seems to be related to the link at the bottom left corner about validating with Windows Genuine advantage.

I tested this with avast! home on Avant Browser (an IE shell).

EDIT:  I just noticed the link changes with every refresh so the one I mentioned above is not the offender.  Its the three that were not displayed that caused the alert.

Title: Re: Strange behaviour with web shield and VBS-Zulu FP?
Post by: hlecter on October 03, 2006, 10:17:20 AM

Here are my Avast log details after visiting the site:

02.10.2006 23:25:53   SYSTEM   1008   Sign of "VBS:Zulu" has been found in "http:  //rad.microsoft.com/ADSAdClient31.dll?GetAd=&PG=CMSDLO&SC=F3&AP=1164" file.
 
02.10.2006 23:33:51   SYSTEM   1008   Sign of "VBS:Zulu" has been found in "http:  //rad.microsoft.com/ADSAdClient31.dll?GetAd=&PG=CMSDLO&SC=F3&AP=1164" file. 

0640-0 virusdefs.

Can't reproduce it today with same VPS.

Title: Re: Strange behaviour with web shield and VBS-Zulu FP?
Post by: perplexed on October 09, 2006, 04:54:25 PM

I had a similar experience, and posted here: http://forum.avast.com/index.php?topic=24059.new;topicseen#new