amicone Posted October 7, 2014 ID:887203 Share Posted October 7, 2014 I think this might be a false positive. I was installing Kaspersky on a new machine, followed by MBAM. MBAM immediately flagged the Kaspersky installer as containing the zbot trojan. I followed the suggested procedure that I read here: 1) remove old MBAM. 2) Install Kaspersky. 3) Turn off protection on Kaspersky. 4) Install MBAM. The file comes from Kaspersky labs, so unless I've got a case of DNS cache poisoning, this should be the real deal. The file is signed and the signature on the file seems to check out. I checked the Kaspersky forum, I'm not the first to notice this, but the response from their staff is always a curt "Please report MBAM's false positives to MalwareBytes." Files generated and attached as requested in the sticky note at the top of the forum.kasperskyZbot.txt Link to post Share on other sites More sharing options...
Staff blender Posted October 7, 2014 Staff ID:887219 Share Posted October 7, 2014 Thank you amicone for reporting. This should be fixed in the next database update. Link to post Share on other sites More sharing options...
amicone Posted October 7, 2014 Author ID:887565 Share Posted October 7, 2014 Re-scan with updated database with no flags on Kaspersky installer. Seems to be fixed now, thanks. Link to post Share on other sites More sharing options...
Staff blender Posted October 7, 2014 Staff ID:887582 Share Posted October 7, 2014 Good to hear. Thanks again for reporting! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now