Zango issue?

[Eddy]

Avast sure detects the weather client that Zango installs and also detects many other things that Zango tries to install (or did try to install in the past) as well as many malwares that sites are trying to " push"  to you(r system) when you gonna use it.

[sanctuaryforever]

so the zango infection I have could have been due to a new variant then and thats why it wasnt detected?

[Maxx_original]

yes, most probably... some malware families are evolved frequently..

[Eddy]

Rabbits ! Rabbits! They are like rabbits 

[Maxx_original]

consulted today again with Misak... we've detected some older files, but had to remove the detections, cause zango.com contacted us with this request.. the newer variants are also "clean" themselves, but could be bundled with a strange downloader someway... the downloaded files could be treated as spyware (or unwanted apps) then.. anyway, this topic remains open

[sanctuaryforever]

I read that Kaspersky are in (or was) in court arguing over the right to treat Zango as malware, do you know if there has been any kind of ruling on that?

ps I thought that other anti-malware products remove Zango so why are Zango.com picking on you guys and not them?

please post back here if you find anything else out Maxx_original if you can, thanks for your efforts and response

[CharleyO]

***

Spybot-S&D detects various parts of Zango as spyware, adware, and PUPs.


***

[sanctuaryforever]

***

Spybot-S&D detects various parts of Zango as spyware, adware, and PUPs.


***

Thanks for the suggestion although it would be great if Avast (alwil team) can somehow find a way of detecting Zango and its variants but I guess the pressure of Zango.com stands in their way (but the Alwil team has my support (for what its worth) and I bet lots of others on this matter of dectecting it).  Avast would be great if it detected it as its the only resident protection I have, the other antispyware programs are only on demand

[Lisandro]

Avast would be great if it detected it as its the only resident protection I have, the other antispyware programs are only on demand

Indeed it does not detect anything with this name (zango).
Hope they improve detection asap.

[polonus]

Remove Zango Manually

Tip: If you are not an expert in this field, we highly recommend you ask an expert.
You'll run the risk of damaging your computer if you make a mistake during the manual removal process.

Stop the following Zango processes:
installershell.exe
zangoinstaller.exe
zanu.exe
zango.exe
zangotbuninstaller.exe


Remove the following Zango registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunzanu
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunango[applicationname]
E5B57AB3-15F8-43A2-ABAC-3E58A9C25818
21B4ACC4-8874-4AEC-AEAC-F567A249B4D4
HKEY_CURRENT_USERSoftwareMicrosoftRASAutodialControlLoginSessionDisable=1
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall[gamename]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallango[applicationname]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallzanu
HKEY_LOCAL_MACHINESOFTWAREzanuHKEY_CURRENT_USERSoftwarezanu


Unregister the following Zango DLL files:
zangohook.dll
zangotb.dll
zanuhook.dll


Locate and delete the following Zango files:
installershell.exe
zangoinstaller.exe
zanu.exe
zango.exe
zangohook.dll
zangotb.dll
zangotbuninstaller.exe
zanuhook.dll

polonus

[sanctuaryforever]

Since I last posted the detection has been removed for Zango (in Avast) I know it is difficult to cover these malware as the companies keep asking for them to be removed but has there been any progress on that court case against Zango that Kaspersky was involved in or will there be anyway to force them (and other questionable companies) to accept their software contains malware and allow you to detect it without being forced to keep removing detections