Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: iga on September 17, 2010, 02:39:11 AM
-
Hi all
Does Avast 5 detect ZeuS.Zbot.aoaq banking trojan virus
just got an alart from zonealarm that this is a new trojan
and I am at risk with avast 5 not detecting it.
I know it's just zonealarm trying to get me to buy an upgrade from them.
but just wanted to know if avast 5 will detect this banking virus.
-
I got the same notification from ZoneAlarm just a few minutes ago and none from avast.
This page says that Avast Home Edition will detect it -
http://www.malwarehelp.org/find-and-remove-zeus-zbot-banking-trojan-2009.html (http://www.malwarehelp.org/find-and-remove-zeus-zbot-banking-trojan-2009.html)
-
This page says that Avast Home Edition will detect it -
http://www.malwarehelp.org/find-and-remove-zeus-zbot-banking-trojan-2009.html (http://www.malwarehelp.org/find-and-remove-zeus-zbot-banking-trojan-2009.html)
I think you will find your link refers to an older variant as it was published in May 2010.
-
I was reading up about this trojan and it seems to be some sort of marketing ploy by avast, if you click on their link they happen to be the only ones who can get rid of it and you have to pay $$.I'd do a full scan anyway just in case.
-
@ sakura1,
Avast does not create a virus as a marketing ploy. The malware you are referring to is a real malware. You can search in the Worms and Virus section of this forum to see how others have fixed the problem, or you can search the Internet.
If you are currently experiencing a malware problem, please open your own thread in the Worms and Virus section of this forum so we can help you. Thank you.
-
so does avast deal with this virus or is what Zone alarm saying true? (I got the same alert from Zone Alarm)
-
Avast deals with all kinds of malware removal; you can view or post in the "Worms and Virus" section of the forum.
If you do an Internet search, which I just did, you will notice that there is considerable about of chatter about ZA creating a "scareware" to get customers with this FP malware.
Welcome to Avast. We do not do things like this. :) Please let me know if you have additional questions. We are here 24/7 for your convenience. Thank you.
-
Hi SafeSurf
I hope that you do not take offence because I sincerely do not mean to offend. So please understand that I mean no ill and I am trying to be as diplomatic as possible. However, in all honesty, your answer does not put my mind at rest at all.
I am sure it is not your intention, but your answer gives the unfortunate impression of trying to avoid the question. You were asked does "Avast! deal with this virus" to which you replied that "Avast deals with all kinds of malware removal" without specifically saying whether Avast! does indeed deal with the problem, nor whether Zone Alarm's claims that it does not are true or false.
Please could you clarify this, or if you do not really know, then could you please say so ? It maybe that you meant that you do not actually know, and were simply suggesting that the question should be raised on the virus section, in which case your answer, with all due respect, is a little misleading.
Thanks.
-
Here is just one example of many searches regarding the false positive: http://imadethisdesign.blogspot.com/2010/09/zeuszbotaoaq-zonealarm-false-alarm.html (http://imadethisdesign.blogspot.com/2010/09/zeuszbotaoaq-zonealarm-false-alarm.html).
If you wish to be more certain that you do not have this malware and have Avast, make sure your definitions are updated, run a Full scan.
Next Check your computer for malware with Malwarebytes’ Anti-Malware (MBAM).
· Download free http://www.malwarebytes.org/ (http://www.malwarebytes.org/) for an on-demand scanner.
· Double Click mbam-setup.exe to install the application.
· After install, click update so you have latest database before scanning.
· Under Settings:
o General: Automatically Save File After Scan Completes is checked off
o Scanner Settings: Check all boxes
o Updater: Download and install update if available is checked off
· Once the program has loaded, select "Perform FULL Scan", then click Scan.
· The scan may take some time to finish, so please be patient.
· When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
· Click the “remove selected” button to quarantine anything found. You will find the infection details under the Quarantine tab.
· The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
· Copy & Paste the entire report in your next reply only if anything turns up postive.
Next run an Avast Boot-time scan if you have a 32-bit machine.
Please let me know if you have any additional questions. Thank you.
-
Thanks. But I still do not know whether Avast! deals with the problem. Does it or does it not ?
Thanks.
-
A new thread has been opened up in the Worms and Virus section of this forum: http://forum.avast.com/index.php?topic=64011.0 (http://forum.avast.com/index.php?topic=64011.0).
@ shermans,
1. What was the results of your Avast Full Scan?
2. What version of Avast are you using? 5.0.677 is the latest version.
3. What product of Avast are you using? Free, Pro, or AIS?
4. What is the results of your MBAM FULL scan? Please cut and paste your log if positive results.
5. What is the results of your Avast Boot-time scan if you have a 32-bit machine?
A screen shot of any positive results would be most helpful. Thank you.
-
Sorry, the question is not to search if our computer is infected or not by the virus ZeuS.Zbot.aoaq, we ask you to indicate to us for each last version of AVAST (Free, Pro, or AIS), if the virus is detected or not
Thanks for your answer
-
Sorry, the question is not to search if our computer is infected or not by the virus ZeuS.Zbot.aoaq, we ask you to indicate to us for each last version of AVAST (Free, Pro, or AIS), if the virus is detected or not
Thanks for your answer
yes and no.....difficult to say as there is new variations every day....
Since 2007, Trend Micro has been monitoring the ZBOT family. The number of ZBOT detections has substantially grown over the years. To date, Trend Micro has seen over 2,000 ZBOT detections and the numbers continue to rise.
ZeuS and Its Continuing Drive Towards Stealing Online Data
http://threatinfo.trendmicro.com/vinfo/web_attacks/ZeuS_and_its_Continuing_Drive_Towards_Stealing_Online_Data.html
Time to Revisit Zeus Almighty
http://blog.threatexpert.com/2009_09_01_archive.html
Welcome to the ZeuS Tracker ( WARNING: this website have list`s of URL that goes direct to malware, do not click any links it may infect you )
https://zeustracker.abuse.ch/
-
Sorry, the question is not to search if our computer is infected or not by the virus ZeuS.Zbot.aoaq, we ask you to indicate to us for each last version of AVAST (Free, Pro, or AIS), if the virus is detected or not
Thanks for your answer
He has a point you have not directly answered the question all you have said is run a scan and if avast is not protecting against this virus that its just a scan for show to make people feel safe.
like a sugar pill rather than the real cure being used to cure something
The problem with security firms is they cant tell you that their product will not protect you or they will lose customer confidence in their brand.
congrats you are becoming a corporation (all the profit none of the responceability)
i would have preferred a direct yes or no to this question with or with out the run a scan comment.
i would prefer that you said no than avoid the question even "no we are currently looking for ways to destroy it in our labs" would have been fine for me.
however to be fair the alert and webpage Lists as of 09/13/10 version 4.8.1351.0 and this is well old i am sure(i currently have version 5.0.677 with definitions 100917-0)
http://www.zonealarm.com/security/en-us/cdn/inclient/virus-alert.htm?source=InClient+Message&medium=ZoneAlarm+Firewall&term=see+threat+details+link&cid=C300012#top&lang=en&app=inclient&oem=1001&prod=0&date=1&dest=zafree_icm
Lists version 4.8.1351.0 as off 09/13/10 (i currently have version 5.0.677 with definitions 100917-0)
so maybe this is nothing but a scare tactic from za by testing the old avast and not the new one?
But please answer this question directly!
Will avast free protect from this virus or not your ability to give a straight answer in this thread will more effect my customer confidence than answering no not yet
thank you very much!
-
Welcome to the ZeuS Tracker
https://zeustracker.abuse.ch/
I got this from that link:
http://i55.tinypic.com/2e2o4f5.jpg Ok...this virus gets me paranoid. :-X
So it can basicly get my passwords for online-services? And hard to detect aswell?
-
Welcome to the ZeuS Tracker
https://zeustracker.abuse.ch/
I got this from that link:
http://i55.tinypic.com/2e2o4f5.jpg Ok...this virus gets me paranoid. :-X
So it can basicly get my passwords for online-services? And hard to detect aswell?
nothing to worry about. if you enter with opera there is a sertificate popup you need to click
i had a link explaining why this is but now i cant find it again....
WARNING: this website have list`s of URL that goes direct to malware, do not click any links it may infect you
-
@ Tanya,
Please edit your post and change your posted link to from http to hXXp so no one can use it as a link. Use the "Modify" button in the post screen. Thank you.
@ Pondus,
Thank you for your input while I was away. :)
Essexboy added to the Worms and Virus thread regarding this issue that this is a ZA "scareware," as I pointed out in the beginning of this thread and found this: http://forums.zonealarm.com/showthread.php?s=1fb514bedc25e3f8fa2602e9d64a40ed&t=75332 (http://forums.zonealarm.com/showthread.php?s=1fb514bedc25e3f8fa2602e9d64a40ed&t=75332). All users of ZA should also be looking at their forum as well.
-
@ Tanya,
Please edit your post and change your posted link to from http to hXXp so no one can use it as a link. Use the "Modify" button in the post screen. Thank you.
Hi, I just linked to a picture on tinypic. It's Pondus' link that can be a bit funny.
Added code-tags to my original post tho. :)
-
@ tanya,
Thanks for editing. BTW, I was not ignoring your PM's, but I do not provide private IM/PM support. All support is to be done in the forum. I hope you understand. Thank you. :)
-
All support is to be done in the forum. I hope you understand.
Yeah, posted in the general forums. It's probably nothing, but thanks.
http://forum.avast.com/index.php?topic=64040.0
-
@ Tanya,
I answered you in your new thread: http://forum.avast.com/index.php?topic=64040.0 (http://forum.avast.com/index.php?topic=64040.0). Thanks. :)
-
Isn't is about time Tanya went to PROFILE then Modify Profile then Forum Profile Information then Please select your country: then Signature: and put information about your system just like my signature about your system just like my signature so that the helpers can offer pertinent advice. ???
-
Isn't is about time Tanya went to PROFILE then Modify Profile then Forum Profile Information then Please select your country: then Signature: and put information about your system just like my signature about your system just like my signature so that the helpers can offer pertinent advice. ???
I'm too PC-stupid to know what I should add there, but I can fish something up from DxDiag if I just remmebered how...
This?
Operating System: Windows XP Professional
System Manufacturer: NVIDIA
System Model: AWRDACPI
BIOS: Award Modular BIOS v6.00PG
Processor: AMD Athlon(tm) 64 Processor 3500+, MMX, 3DNow, ~2.2GHz
Memory: 1024MB RAM
I made this profile in 04, so we all got to wear flags now? Can't disable it now but can use any flag :P
-
Just look at some of the other signatures in the posts to get an idea, basically they give a little information on your system, OS, CPU, RAM, avast version and what security application you are using, etc.
Use a text editor like notepad jot it down all on one line and then copy and paste it into your Profile.
Click the Profile button at the top of each page, from the new page, select the Forum Profile Information, now scroll down to the Signature: box and paste your information into that.
-
The truth :
http://www.ghacks.net/2010/09/18/zonealarm-global-virus-alert-about-zeus-zbot-aoaq-scareware-at-its-best/ 8)
nmb
-
The truth :
http://www.ghacks.net/2010/09/18/zonealarm-global-virus-alert-about-zeus-zbot-aoaq-scareware-at-its-best/ 8)
nmb
I agree, http://ethicsgradient.net/2010/09/17/zone-alarm-zeus-zbot-aoaq-scareware/ this is only one of may results from google, or bing, or yahoo.
It is a regretful tactic from ZA but what can you do about it? UNINSTALL THEIR SOFTWARE.
If this http://www.zonealarm.com/security/en-us/cdn/inclient/virus-alert.htm?source=InClient+Message&medium=ZoneAlarm+Firewall&term=get+protection+link&cid=C300013 is not misleading publicity I don't know what is. Quote from the page "ZeuS is rarely detected by antivirus because it changes form rapidly." hahahahahaha. They're so funny.
To the OP, Avast! probably can detect the virus, that's probably why SafeSurf suggested you do a full scan to make sure you're NOT infected.
Martin.-
-
Nice how in the second link you gave, they selectively reported some AVs not detecting it in virustotal, yet didn't give the link. Not to mention they said avast 4.8 didn't detect it no mention of avast 5.0677, so it makes me wonder why they selectively chose to mention avast 4.8.
It is nice that they also use virustotal for a reference, yet they don't participate in the project, I wonder why that is.
-
Bye bye, ZoneAlarm. With such "marketing" practices as this, it was nice knowing you. I'll promptly be looking for another firewall, thank you very much. And from the looks of their forum, I'm not alone...