This topic shall be closed,samples can be sent directly to AvastLab.If you want to increase your post count,think of something smarter.No offense but it’s the true.
system
824
Was cleaning a computer infected with win8 security system and found that avast does not detect this rootkit that comes bundled along with this rogue.
https://www.virustotal.com/file/3945861e049199662423a539e96b0c49a904501e9aef02faa4da678633cbcc37/analysis/
Reported to avast!
polonus
825
Hi true indian,
Subject had already been mentioned extensively in an earlier thread here: http://forum.avast.com/index.php?topic=104668.0
Why did not you react there?
polonus
system
826
Pondus
827
see the sigcheck and first seen by VT
system
828
Sigcheck
publisher…: Oracle Corporation
product…: Oracle VM VirtualBox
internal name…: VirtualBox.exe
copyright…: Copyright (C) 2009-2011 Oracle Corporation
original name…: VirtualBox.exe
file version…: 4.0.4.70112
description…: Oracle VM VirtualBox Manager
First seen by VirusTotal
2012-09-11 08:39:32 UTC ( 1 minute ago )
I had checked for a digital signature earlier itself when i downloaded it…and it didnt have one so i guess this is 100% Malware.
P.S. I like the name given by SAS on VT: Heur.Agent/Gen-FakeAvast …interesting… ;D
Pondus
829
you may run it at treathexpert to see what it does
system
830
I dont think it does really anything much…i couldnt get into my threat expert account because i forgot my username and password.
http://anubis.iseclab.org/?action=result&task_id=12633cb1584a7e084498422305d2e74d6&format=html
polonus
831
Hi true indian,
Can you confirm you also posted this here: http://forums.malwarebytes.org/index.php?showtopic=115632
polonus
system
832
yes that was me who posted this there…
Avast! now has detection… ;D
system
833
Again some piece of Malware on avast! FB wall…
https://www.virustotal.com/file/13fdec273e3240acbc1ea323a2c4a4c0c64cd6d9da04107b51315a0d28ccc2d4/analysis/
it [rar file] extracts a hidden text file called significant.txt which contain BKDR/symmi
Reported to avast!
system
834
system
835
system
836
system
837
polonus
838
Hi true indian,
As you can see the payload is the infostealer bancos y trojan variant. For Threat Expert awareness of this file and what subfiles it creates, see: http://www.threatexpert.com/files/111.exe.html
polonus
system
839
system
840