Comments on: Zbot Mailings on the Increase http://blog.threatfire.com/2008/12/zbot-mailings-on-the-increase.html ThreatFire™ AntiVirus protects when others can't Wed, 10 Mar 2010 11:00:47 -0600 http://wordpress.org/?v=2.8.4 hourly 1 By: Ryan Meray http://blog.threatfire.com/2008/12/zbot-mailings-on-the-increase.html/comment-page-1#comment-106 Ryan Meray Thu, 01 Jan 2009 15:30:00 +0000 http://newblog.threatfire.com/2008/12/zbot-mailings-on-the-increase/#comment-106 No worries, spamverts are going to be a given running a blog with any level of visibility.<br/><br/>I've started rolling out Threatfire to some of my higher-risk clients, the ones who have seen at least two separate infections within a few months. I'm looking forward to seeing how it works for them. No worries, spamverts are going to be a given running a blog with any level of visibility.

I’ve started rolling out Threatfire to some of my higher-risk clients, the ones who have seen at least two separate infections within a few months. I’m looking forward to seeing how it works for them.

]]> By: ThreatFire Blogger http://blog.threatfire.com/2008/12/zbot-mailings-on-the-increase.html/comment-page-1#comment-96 ThreatFire Blogger Fri, 19 Dec 2008 16:33:00 +0000 http://newblog.threatfire.com/2008/12/zbot-mailings-on-the-increase/#comment-96 Ryan-<br/><br/>Removal of these variants really is not all that difficult. Vundo was painful because it would inject itself into some sensitive system processes and kill off AV solutions. Zbot hasn't been doing quite the same thing, although I have started to see it killing off more AV solutions once it is installed on the system.<br/><br/>Keeping it off of users' systems in the first place is our goal and ThreatFire does a great job at that.<br/><br/>Yeah, I am tiring of the spamvertizing. They are gone now. :)<br/><br/><br/>Kurt Ryan-

Removal of these variants really is not all that difficult. Vundo was painful because it would inject itself into some sensitive system processes and kill off AV solutions. Zbot hasn’t been doing quite the same thing, although I have started to see it killing off more AV solutions once it is installed on the system.

Keeping it off of users’ systems in the first place is our goal and ThreatFire does a great job at that.

Yeah, I am tiring of the spamvertizing. They are gone now. :)

Kurt

]]> By: Ryan Meray http://blog.threatfire.com/2008/12/zbot-mailings-on-the-increase.html/comment-page-1#comment-95 Ryan Meray Thu, 18 Dec 2008 21:12:00 +0000 http://newblog.threatfire.com/2008/12/zbot-mailings-on-the-increase/#comment-95 Gotta love that comment spam.<br/><br/>This Zbot thing sounds nasty as all heck, but I haven't seen it in the wild yet on any client systems. Is the removal on it any more difficult than Vundo variants? Gotta love that comment spam.

This Zbot thing sounds nasty as all heck, but I haven’t seen it in the wild yet on any client systems. Is the removal on it any more difficult than Vundo variants?

]]>