Rombertik virus?

system · 2015-05-08T09:56:38.000Z

Hi!

I just read a new virus Facebook
Rombertik what they name.
When you recognize this virus avast?
I read about:

The virus is usually spread Rombertik dubbed e-mail attachments, and outwardly resembles a scanned document. However, if the unsuspecting reader decompresses the file, the program takes serious precautions to avoid catching a virus. Within this framework, for example, check that it is not a secure environment called a sandbox is running in memory and also checks that can not be monitored.
only then you start to extract yourself when you are safe, then he makes a copy of itself after installation, in addition to places where you certainly will not be deleted after a reboot either. But he also makes it difficult for the interception Rombertik that the data is only three per cent of the virus itself, code, images and other data to the other set only for álcaként. Similarly, a lot of running a scam process (960 million times write something in memory), the subsequent analysis more difficult.
The toughest, however, only then is: once it notices under a lot of checks being watched, rather render the victim machine, the boot sector overhaul, with the result that if you want to restart your machine to the above message can be seen only on which an endless cycle thanks impossible to move on. If this permission may not be, any file we have achieved a randomly generated password protect it.

When you start the computer writes the victims: Carbon crack attempt . Failed_

spelling mistakes sorry I can not speak English well

Pondus · 2015-05-08T12:40:43.000Z

rombertik … First submission 2015-01-12 00:47:20 UTC ( 3 months, 3 weeks ago )
https://www.virustotal.com/en/file/77bacb44132eba894ff4cb9c8aa50c3e9c6a26a08f93168f65c48571fdf48e2a/analysis/

Announcements