Zeus/ZBOT infection manifested through Amazon

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Jens, Mar 18, 2012.

  1. Jens

    Jens Private E-2

    Today while browsing Amazon I found myself confronted (both in Firefox and IE) with a dialog overlaid over the page which would not let me go anywhere else. It said:
    followed by fields to enter all credit card details including signature panel code and ATM PIN. It looked genuine, except that
    - I wasn't doing Online Banking. I have online banking but not with Amazon. I wasn't even aware that they did. In fact, they don't, do they?
    - asking for an ATM PIN sounds a tad suspicious
    - my information will be "overused"? Yeah, right.
    Googling this text convinced me I had contracted a form of Zeus/ZBOT, so I came here (after having successfully cured a previous infection with another PC last year).

    Here are my logs. I can't seem to find back a log of SAS or MB. Sorry about that. Perhaps they were erased by one of the later steps? IIRC SAS found nothing and MB found two infections that I then cleared.

    My question is of course: Is my PC now clean?

    PS: Browsing Amazon seems to work fine again.
     

    Attached Files:

    Last edited: Mar 18, 2012
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I am not finding any malware in your logs. Please use your system for a while and let me know if your issue returns. ;)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds