Intrusion PreventionZeus.Botnet
Description
It indicates that the system might be infected by Zeus/ZBot botnet. All botnet signatures from FortiOS 5.6 onwards are under IPS, and have their default action set to "Block".
Affected Products
Any unprotected Windows system is vulnerable.
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
If required, the signature can be set to "Block".
Please use anti-virus software to scan and clean the infected system.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17785 |
| Created | Oct 26, 2009 |
| Updated | Nov 17, 2025 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | Malware |