Hi all
Does Avast 5 detect ZeuS.Zbot.aoaq banking trojan virus
just got an alart from zonealarm that this is a new trojan
and I am at risk with avast 5 not detecting it.
I know it’s just zonealarm trying to get me to buy an upgrade from them.
but just wanted to know if avast 5 will detect this banking virus.
I got the same notification from ZoneAlarm just a few minutes ago and none from avast.
This page says that Avast Home Edition will detect it -
http://www.malwarehelp.org/find-and-remove-zeus-zbot-banking-trojan-2009.html
I think you will find your link refers to an older variant as it was published in May 2010.
I was reading up about this trojan and it seems to be some sort of marketing ploy by avast, if you click on their link they happen to be the only ones who can get rid of it and you have to pay $$.I’d do a full scan anyway just in case.
@ sakura1,
Avast does not create a virus as a marketing ploy. The malware you are referring to is a real malware. You can search in the Worms and Virus section of this forum to see how others have fixed the problem, or you can search the Internet.
If you are currently experiencing a malware problem, please open your own thread in the Worms and Virus section of this forum so we can help you. Thank you.
so does avast deal with this virus or is what Zone alarm saying true? (I got the same alert from Zone Alarm)
Avast deals with all kinds of malware removal; you can view or post in the “Worms and Virus” section of the forum.
If you do an Internet search, which I just did, you will notice that there is considerable about of chatter about ZA creating a “scareware” to get customers with this FP malware.
Welcome to Avast. We do not do things like this. 
Please let me know if you have additional questions. We are here 24/7 for your convenience. Thank you.
Hi SafeSurf
I hope that you do not take offence because I sincerely do not mean to offend. So please understand that I mean no ill and I am trying to be as diplomatic as possible. However, in all honesty, your answer does not put my mind at rest at all.
I am sure it is not your intention, but your answer gives the unfortunate impression of trying to avoid the question. You were asked does “Avast! deal with this virus” to which you replied that “Avast deals with all kinds of malware removal” without specifically saying whether Avast! does indeed deal with the problem, nor whether Zone Alarm’s claims that it does not are true or false.
Please could you clarify this, or if you do not really know, then could you please say so ? It maybe that you meant that you do not actually know, and were simply suggesting that the question should be raised on the virus section, in which case your answer, with all due respect, is a little misleading.
Thanks.
Here is just one example of many searches regarding the false positive: http://imadethisdesign.blogspot.com/2010/09/zeuszbotaoaq-zonealarm-false-alarm.html.
If you wish to be more certain that you do not have this malware and have Avast, make sure your definitions are updated, run a Full scan.
Next Check your computer for malware with Malwarebytes’ Anti-Malware (MBAM).
· Download free http://www.malwarebytes.org/ for an on-demand scanner.
· Double Click mbam-setup.exe to install the application.
· After install, click update so you have latest database before scanning.
· Under Settings:
o General: Automatically Save File After Scan Completes is checked off
o Scanner Settings: Check all boxes
o Updater: Download and install update if available is checked off
· Once the program has loaded, select “Perform FULL Scan”, then click Scan.
· The scan may take some time to finish, so please be patient.
· When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
· Click the “remove selected” button to quarantine anything found. You will find the infection details under the Quarantine tab.
· The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
· Copy & Paste the entire report in your next reply only if anything turns up postive.
Next run an Avast Boot-time scan if you have a 32-bit machine.
Please let me know if you have any additional questions. Thank you.
Thanks. But I still do not know whether Avast! deals with the problem. Does it or does it not ?
Thanks.
A new thread has been opened up in the Worms and Virus section of this forum: http://forum.avast.com/index.php?topic=64011.0.
@ shermans,
Sorry, the question is not to search if our computer is infected or not by the virus ZeuS.Zbot.aoaq, we ask you to indicate to us for each last version of AVAST (Free, Pro, or AIS), if the virus is detected or not
Thanks for your answer
yes and no…difficult to say as there is new variations every day…
Since 2007, Trend Micro has been monitoring the ZBOT family. The number of ZBOT detections has substantially grown over the years. To date, Trend Micro has seen over 2,000 ZBOT detections and the numbers continue to rise.
ZeuS and Its Continuing Drive Towards Stealing Online Data
http://threatinfo.trendmicro.com/vinfo/web_attacks/ZeuS_and_its_Continuing_Drive_Towards_Stealing_Online_Data.html
Time to Revisit Zeus Almighty
http://blog.threatexpert.com/2009_09_01_archive.html
Welcome to the ZeuS Tracker ( WARNING: this website have list`s of URL that goes direct to malware, do not click any links it may infect you )
https://zeustracker.abuse.ch/
He has a point you have not directly answered the question all you have said is run a scan and if avast is not protecting against this virus that its just a scan for show to make people feel safe.
like a sugar pill rather than the real cure being used to cure something
The problem with security firms is they cant tell you that their product will not protect you or they will lose customer confidence in their brand.
congrats you are becoming a corporation (all the profit none of the responceability)
i would have preferred a direct yes or no to this question with or with out the run a scan comment.
i would prefer that you said no than avoid the question even “no we are currently looking for ways to destroy it in our labs” would have been fine for me.
however to be fair the alert and webpage Lists as of 09/13/10 version 4.8.1351.0 and this is well old i am sure(i currently have version 5.0.677 with definitions 100917-0)
Lists version 4.8.1351.0 as off 09/13/10 (i currently have version 5.0.677 with definitions 100917-0)
so maybe this is nothing but a scare tactic from za by testing the old avast and not the new one?
But please answer this question directly!
Will avast free protect from this virus or not your ability to give a straight answer in this thread will more effect my customer confidence than answering no not yet
thank you very much!
I got this from that link:
http://i55.tinypic.com/2e2o4f5.jpg Ok…this virus gets me paranoid. :-X
So it can basicly get my passwords for online-services? And hard to detect aswell?
nothing to worry about. if you enter with opera there is a sertificate popup you need to click
i had a link explaining why this is but now i cant find it again…
WARNING: this website have list`s of URL that goes direct to malware, do not click any links it may infect you
@ Tanya,
Please edit your post and change your posted link to from http to hXXp so no one can use it as a link. Use the “Modify” button in the post screen. Thank you.
@ Pondus,
Thank you for your input while I was away.
Essexboy added to the Worms and Virus thread regarding this issue that this is a ZA “scareware,” as I pointed out in the beginning of this thread and found this: http://forums.zonealarm.com/showthread.php?s=1fb514bedc25e3f8fa2602e9d64a40ed&t=75332. All users of ZA should also be looking at their forum as well.
Hi, I just linked to a picture on tinypic. It’s Pondus’ link that can be a bit funny.
Added code-tags to my original post tho.
@ tanya,
Thanks for editing. BTW, I was not ignoring your PM’s, but I do not provide private IM/PM support. All support is to be done in the forum. I hope you understand. Thank you.
Yeah, posted in the general forums. It’s probably nothing, but thanks.
