Moved to General Malware Discussion.
If you use the search function on the Threat Center's website for Zbot it comes up with dozens of responses under the heading PWS-Zbotxxxx where xxxx is variable.
Each anti-malware software maker names these things differently.
Likewise a search for Zeus brings up numerous hits.
Do you need help removing this or are you OK and merely asking about it?
1 of 1 people found this helpful
We are indeed aware of it and have been tracking it's variations as well. Based on our description, it had been added since December 19, 2007. Also, it has recently been Low-Profiled for being used in an airline ticket scam.
Here is the description on this malware: http://vil.nai.com/vil/content/v_143802.htm
You can also read the research paper we have related to Zbot in which we discuss the business behind these password stealers:
Hope this helps.
As far as I know, I am not infected. I ran a full scan yesterday and it did not show up. I just asked about it because I needed to know whether the McAfee scan would find it. Every thing I read aout it says that it is not detectable by virus scan programs. I received a bogus email mid November from the "irs" and do not think I followd the link. I just wanted to verify that I was not infected.