Hello,
I want to report that avast can’t detect this virus sensored
This virus can format your hard drive. Result of virustotal.com:
http://www.virustotal.com/file-scan/report.html?id=e3652ce12bda4eb774eb0d78c46cc2c9e104d6d32d4c90e3a78cf7b9d7dc6470-1307309635
Thanks for attention
Please remove the file share link as you have no control over who might download it or what they might do with it. All samples should be sent directly to avast.
Send the sample/s to avast as a Undetected Malware:
Open the chest and right click in the Chest and select Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update.
Or
Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.
Thanks for your information
No problem, glad I could help.
Welcome to the forums.
Hi b-agoy and DavidR,
Could be the example above is a malcoded Trojan.dropper variant posing as the original Ultrasurf, and indeed tries to format the HDD, but some additional words on the original Ultrasurf software “as such”
The following information should be taken into consideration because of the possible controversial nature of this popular anti-censorship software,
Because of the nature of the program it could be flagged as a PUP, could be sent for analysis as
a variant of Win32/Packed.Themida potentially unwanted application.
This is a quote taken from the UltraSurf site on Ultrasurf being a virus
4. Is UltraSurf a Trojan or virus?
A: Neither. UltraSurf provides users with state-of-the-art internet technology to break through firewall safely. It is a popular anti-censorship software, not a Trojan or virus. Some anti-virus software companies classify UltraSurf as a Trojan software simply because UltraSurf is able to break through firewalls. It is a mistake and a wrong classification. We are in the process of resolving this issue with these anti-virus companies through technique channels and legal channels. It is our mission to protect users’ privacy when browsing the internet. Please rest assured that UltraSurf will not touch any of the documents on your PC.
AV should detect it as a PUP or possibly unwanted program if it is used to break through firewalls and a company admin denies you the use of this kind of software against company policies (that is why McAfee sees the program as a threat and has it removed, other av’s consider it a generic backdoor) or it has been placed on your private computer while you haven’t deliberately or intentfully installed it,
polonus
Yes, but my harddrive has been formatted
It’s really virus…
I hope avast can detect this virus…
Hi b_agoy,
You always have to check the download site before downloading any software. Especially with this category of software that is frowned upon by certain third parties, software can easy fall prey to malcreants that present the software bundled with their miscreations, and then tou have an perfect example of what we call a trojan, just like the one you stumbled upon. And in this case who is to complain about something that others classify as riskware anyway and it helps to further the questionable reputation of the riskware at hand. So best is always to download from a respectable source or right from the developer site, pre-scan or run sandboxed or be guided by a known to be secure MD5 hash, or ask someone here on the forums, better safe than sorry,
polonus