Avast WEBforum
Other => Viruses and worms => Topic started by: zakuli on September 17, 2010, 11:13:17 AM
-
Hi,
SafeSurf, can you answer clearly (YES or NO) to the question from "clueless101" and from "iga"
"Does Avast 5 detect ZeuS.Zbot.aoaq banking trojan virus"
or say where we can find easily the information wanted
Thank's for your answer
Best regards
-
Please see the malware checking instructions that I posted here http://forum.avast.com/index.php?topic=64000.0 (http://forum.avast.com/index.php?topic=64000.0) - see Post #8. You can continue your thread regarding this subject in this thread. Thank you. :)
-
i think avast can't detect this zeus,however zeus is the "worst" virus if you are from USA where paypal from internet is a routine,also zeus creators use the latest methods to hide the virus in victims pc,correct me if i am wrong i think zeus has no symptoms.
-
I regret to say that SafeSurf does not know the answer. I have asked him twice on the link to which he refers in the above posting, and unfortunately, he has studiously avoided answering the question each time.
Zakuli - your question could not be more clear but I doubt if you will get an answer which is equally as clear as your question.
I have of course followed the instructions which SafeSurf proposes, but nothing adverse is reported. Of course, if Avast! cannot detect the virus, then you would not expect anything adverse to be reported ! So I still do not know whether I am infected, although I have absolutely no reason or symptoms to fear that I am. But in this respect, Avast! is no help IF it cannot alert me to something which it cannot detect. That is what I wanted to know, but I am really none the wiser.
In view of the reluctance to answer the question directly, but just to give a "politician's" answer, I can only conclude that Zone Alarm's claims that Avast! does not detect the virus are indeed, sadly, true.
-
I regret to say that SafeSurf does not know the answer. I have asked him twice on the link to which he refers in the above posting, and unfortunately, he has studiously avoided answering the question each time.
Zakuli - your question could not be more clear but I doubt if you will get an answer which is equally as clear as your question.
I have of course followed the instructions which SafeSurf proposes, but nothing adverse is reported. Of course, if Avast! cannot detect the virus, then you would not expect anything adverse to be reported ! So I still do not know whether I am infected, although I have absolutely no reason or symptoms to fear that I am. But in this respect, Avast! is no help IF it cannot alert me to something which it cannot detect. That is what I wanted to know, but I am really none the wiser.
In view of the reluctance to answer the question directly, but just to give a "politician's" answer, I can only conclude that Zone Alarm's claims that Avast! does not detect the virus are indeed, sadly, true.
you don't have to blame avast(avast team) if it can detect this virus,atleast you can use other anti-viruses,you are infected with zeus?,it's your fault,they are just tryin to help you ;D
-
I am not blaming anyone, least of all Avast! I think very highly of Avast! and use it all the time. If Avast! cannot detect zeus, then no doubt the other anti-virus software cannot either, and indeed Zone Alarm claims that Norton and AVG cannot detect it either. So there is no point in using another anti-virus, because I am confident that Avast! is the best there is.
All I want is a clear answer to the simple question. Can Avast! detect this virus or can it not ? What is difficult about that question ? And why will Avast! not give a straightforward, clear answer to that question ? I do not understand why the Avast! team refuses to answer the question, that is all. Enough people have asked, but the only answer anyone gives is a "politician's" answer which skirts around the point.
So let's try just one more time. Can Avast! detect the ZeuS.Zbot.aoaq banking trojan virus or is Avast! unable to do so ?
-
Ok, lets say we are infected. What has happened and how?
If I after my infection have logged into my email-addresses, gaming-accounts, paypals, facebook, forum-accounts and whatnot. Does it mean that ALL that info is in the hands of someone else?
Does not the program (lets say if it logged my keystrokes when I typed my passwords/personalia) need to get through the ZA-firewall and upload the information? How does this actually work? They call it a Trojan, does that also mean keylogger?
Will post a scanlog soon.
-
Ok, lets say we are infected. What has happened and how?
If I after my infection have logged into my email-addresses, gaming-accounts, paypals, facebook, forum-accounts and whatnot. Does it mean that ALL that info is in the hands of someone else?
Does not the program (lets say if it logged my keystrokes when I typed my passwords/personalia) need to get through the ZA-firewall and upload the information? How does this actually work? They call it a Trojan, does that also mean keylogger?
Will post a scanlog soon.
check this video
http://www.youtube.com/watch?v=CzdBCDPETxk
-
So let's try just one more time. Can Avast! detect the ZeuS.Zbot.aoaq banking trojan virus or is Avast! unable to do so ?
http://forum.avast.com/index.php?topic=64000.msg541023#msg541023
-
I am not blaming anyone, least of all Avast! I think very highly of Avast! and use it all the time. If Avast! cannot detect zeus, then no doubt the other anti-virus software cannot either, and indeed Zone Alarm claims that Norton and AVG cannot detect it either. So there is no point in using another anti-virus, because I am confident that Avast! is the best there is.
All I want is a clear answer to the simple question. Can Avast! detect this virus or can it not ? What is difficult about that question ? And why will Avast! not give a straightforward, clear answer to that question ? I do not understand why the Avast! team refuses to answer the question, that is all. Enough people have asked, but the only answer anyone gives is a "politician's" answer which skirts around the point.
So let's try just one more time. Can Avast! detect the ZeuS.Zbot.aoaq banking trojan virus or is Avast! unable to do so ?
Hallo. I'm a FREE AVAST USER writing from Italy. Because of language I have some little problem to follow any single detail of SafeSurf's answers.
I'ld appreciate very much when Shermans's simple question should receive the simple requested answer.
And: does The Avast Free Edition detect the virus?
-
Hi, back again!
I ran Adaware, Spybot, Avast! and that malware-program I posted.
What else should I do to try detect it? What more is it too look for?
This any good? http://www.threatexpert.com/blog/zbot/ZeusDecoder.zip
I think it do some 'false' detections?
-
What else should I do to try detect it? What more is it too look for?
look for what, are you infected, do you have a problem ?
The Malwarebytes log you posted say " No action taken " you have to click the REMOVE SELECTED button to quarantine it
-
What else should I do to try detect it? What more is it too look for?
look for what, are you infected, do you have a problem ?
To know how to see if we are infected, and what suggest we're not infected.
That program I posted found 5 "signatures" on my computer, but that was prolly the aaw/windows defender and zeusdecoder definitions of the virus. So I am probably ok. Just very curious about this.
The Malwarebytes log you posted say " No action taken " you have to click the REMOVE SELECTED button to quarantine it
It was nps with that. It was some kind of harmless leftover.
Will just delete that post as it is just distracting. ;)
-
Thank you lefty123 for the youtube link, I think it answers the question - and several other unasked questions, besides. Since the more malicious the hacker, the less likely he wants to be noticed until after he has stolen your info and draining your accounts, the question "What are your symptoms?" is next to POINTLESS! If the exploit is not detected before it is executed, by the time the system meltdown begins to show symptoms it is probably already too late.
I believe the Zone Alarm "warning" is a scare tactic (inexcusable behavior) but that doesn't remove the reality that NO SOFTWARE will detect a new variant until it is updated first by the provider, second by the end-user, unless it "gets lucky" in the heuristics scan. Thankfully, crackers are criminals, criminals are generally somewhat lazy, so heuristics will generally detect - as long as the setting is on "High".
Would anyone rather deal with a few false positives or the total financial ruin and ensuing destruction of their computer after the fact?
(Lefty's YouTube link is worth repeating/sharing: http://www.youtube.com/watch?v=CzdBCDPETxk )
Avast is STILL the best, most socially responsible and my all-time favorite safety/security tool. Until the day they pull a boneheaded scareware tactic like ZA at least...
-
If the exploit is not detected before it is executed, by the time the system meltdown begins to show symptoms it is probably already too late.
well,exactly
-
So, after all that, the long and the short of it is that Avast! does not detect Zeus ! Why could someone not have said that in the first place, and it would have saved all this lengthy chat ?
All I wanted to know when I first asked the original question "Does Avast! detect ZeuS.Zbot.aoaq banking trojan virus" was does Avast! detect Zeus ?
How much easier it would have been just to say "No", instead of which I got a long winded technical dissertation which I did not need ! I now know that Avast! does not detect Zeus, that Zone Alarm's claims are therefore not unreasonable, and that Zone Alarm's extra security products may be worth considering if they can actually do the job that Avast! cannot. As Left123 evidently concludes "If the exploit is not detected before it is executed, by the time the system meltdown begins to show symptoms it is probably already too late."
Thanks nevertheless at last. ::) ::)
-
Do you have Zone alarm by any chance - as they have started a new scareware advertising programme - there is no such animal
http://forums.zonealarm.com/showthread.php?t=75328
-
Do you have Zone alarm by any chance - as they have started a new scareware advertising programme - there is no such animal
http://forums.zonealarm.com/showthread.php?t=75328
i hope this crap av will be deleted from the "map",it's lame what they do,THEY FORCE YOU WITH THEIR OWN WAY TO PURCHASE THEIR PRODUCT JUST TO HAVE PROTECTION AGAINST PROBABLY THE WORST VIRUS EVER,it would be free!
-
Thank you Essexboy for sharing the za "scareware" information again. I posted something similar in the original thread on the 4.0 / 5.0 page more than 12 hours ago with these and other users of za, but people were too emotional at the time and directed their anger at me instead. I hope things have settled down at this point after reading the threads and educating themselves about this this situation. Thank you. :)
-
people were too emotional at the time and directed their anger at me instead.
Nobody directed their anger at anyone. I could not have been more diplomatic in my original question but you just would not answer the question that several other people also politely asked. Instead, you kept dancing round the issue, which made everyone suspicious. It has now been answered, and it is evident that Avast! unfortunately does not detect Zeus. So please do not blame other people. Thanks.
-
@ shermans
As you are a Newbie you should take advice from the avast Evangelists.
Recommended free antivirus software:
■ Avira AntiVir Personal – FREE Antivirus
■ AVG Anti-Virus Free Edition
■ avast! antivirus Home Edition
■ Microsoft Security Essentials
http://www.malwarehelp.org/find-and-remove-zeus-zbot-banking-trojan-2009.html
-
people were too emotional at the time and directed their anger at me instead.
Nobody directed their anger at anyone. I could not have been more diplomatic in my original question but you just would not answer the question that several other people also politely asked. Instead, you kept dancing round the issue, which made everyone suspicious. It has now been answered, and it is evident that Avast! unfortunately does not detect Zeus. So please do not blame other people. Thanks.
It isn't quite so simple as that.
Avast has many different zbot/Zeus detections, the problem is that no one can equate what ZA are calling this ZeuS.Zbot.aoaq as there is no standard naming convention. So it could have many different aliases across all of the different AVs.
Trying to find what avast might be calling this (or any other AV for that matter) would require a sample to be sent to virus total with 43 different scanners and first see if avast and other AVs are detecting it and what other aliases are given.
-
Hey guys
Done some looking up on this virus it is a bad one alright
it's hard to detect.
I have a few security apps that I scan my PC with the more the better
Avast 5
ThreatFire
SUPERAntiSpyware Free Edition
A-squared or the new one Anti-malware free
Malewarebytes Anti-Malware
The way I look at it if one does not detect something bad maybe one of the other security apps I have might.
I also have KeyScrambler free for firefox it encrypts your keystrokes deep in the kernel so it defeats known and unknown keyloggers by giving them "scrambled," logs!!!
Here is the link for anyone that would feel a little bit safer have there keystrokes encrypted.
KeyScrambler free http://www.qfxsoftware.com/index.html (http://www.qfxsoftware.com/index.html)
Lets hope Avast can do something about this.
iga
-
The one thing that I don't see mentioned in your list is a a hard drive imaging application, if all else fails you have to have a fall back and system restore simply isn't up to the task.
Yesterday whilst doing a little testing I trashed my system, wouldn't reboot missing hal.dll and no doubt lots of other stuff but without hal.dll you can't get in. I broke out my Drive Imaging application Boot CD and fired it up, 30 minutes later I'm sitting working at my system again. I do a weekly image back-up of my primary hard disk partitions (and the last one being 3 days before) and I do daily (of more frequently) back-ups of volatile files, like emails, bookmarks, documents, etc.
To cut a long story short my loss was negligible and 30 minutes of time. I bought this software many years ago, it still works great on my XP Pro system and has more than paid for itself over the years.
If you don't have a back-up and recovery strategy, you could be in a world of hurt.
-
Just a quick suggestion to anyone who may be concerned about a possible infection (and I don't intend for this to spiral into a Windows vs. Mac vs. Linux argument ;D )....
You can download and use a live CD / USB key version of Ubuntu. You can even set it up so that it's NOT persistent (i.e. it won't save any changes on logout) and that way you can always be assured that you'll always have a "clean" OS to do your banking or any other "critical" things.
Just my two cents....
-
So not being infected is the main concern then? Hope it's easier to detect that...thing.
Instead, you kept dancing round the issue, which made everyone suspicious.
LOL, dramatic. Calm! ;D
Avast! actually got Zeus in it's definitions. The thing is that this virus keep changing form.
-
quote from Shermans
It has now been answered, and it is evident that Avast! unfortunately does not detect Zeus.
How do you know ? what version is that
ZeuS and Its Continuing Drive Towards Stealing Online Data
http://threatinfo.trendmicro.com/vinfo/web_attacks/ZeuS_and_its_Continuing_Drive_Towards_Stealing_Online_Data.html
Since 2007, Trend Micro has been monitoring the ZBOT family. The number of ZBOT detections has substantially grown over the years. To date, Trend Micro has seen over 2,000 ZBOT detections and the numbers continue to rise.
Time to Revisit Zeus Almighty
http://blog.threatexpert.com/2009_09_01_archive.html
One way or another, the wave of new Zeus/Zbot samples being distributed every day is alarming. It's kind of an "attack of the clones" when multiple modifications of the bot are being produced in-the-wild, packed and encrypted on top with all sorts of packers, including modified, hacked, or private packer builds. Before being released, every newly generated and protected bot is uploaded into popular multi-AV scanner services to make sure it is not detected by any antivirus vendor. Hence, quite a bit of a problem in terms of its distribution scale.
-
why do you keep posting av's to remove zeus?1-2 days is enough to steal your "whole life" ^^,format just to make sure that this piece of destruction has rly gone ;D
-
why do you keep posting av's to remove zeus?
and what AV have i posted to remove Zeus ???
most people would understand that i am posting ZEUS INFO that just happens to be on Trend Micro`s web
but you did not read it...did you...
-
I now know that Avast! does not detect Zeus, that Zone Alarm's claims are therefore not unreasonable, and that Zone Alarm's extra security products may be worth considering if they can actually do the job that Avast! cannot.
Wait, what? You believe some dumb scammy popup from some weird firewall? Now this is funny.
oh, and zonealarm SUCKS if they need stupid popups with fake warnings to make people buy their products.
-
I now know that Avast! does not detect Zeus, that Zone Alarm's claims are therefore not unreasonable, and that Zone Alarm's extra security products may be worth considering if they can actually do the job that Avast! cannot.
Wait, what? You believe some dumb scammy popup from some weird firewall? Now this is funny.
oh, and zonealarm SUCKS if they need stupid popups with fake warnings to make people buy their products.
+1