ComboFix è stato infettato con il Sality

[Gromobud]

Buon giorno, miei amici italiani!
Prestare attenzione se si utilizza questo strumento:

...the program ComboFix had a file in it that is infected with the Sality virus. The minute we heard about this, we pulled the executable so that it is no longer available from BleepingComputer.com. Unfortunately we have no control over other sites that may have mirrored ComboFix without permission, so please do not attempt to download it elsewhere.

The developer, sUBs, is currently looking into what happened and when I have a full update, I will be sure to let you know. From the limited information that I have, it appears that the affected version has been available since approximately 2am EST on January 29th, but it may have been earlier. If this timeframe changes, I will update this topic to let you know. If you have used ComboFix in the last day or so, then you should examine your system for possible infection. If you have used a copy of ComboFix prior to this version, then you should be ok.

SHA256 Hashes of known affected versions are:

4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333
e5341c3c32a9726a2d3dd1ac0b90f13d896581ab8707dd0a17431df061a2a71d
4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333
e95f77fd437b16312fbd66a02fed8b179968a7615c1bd3cd3b2fd86879b4bbc8

Leggi qui:

Codice: Seleziona tutto

http://www.bleepingcomputer.com/forums/topic483431.html 

Verifica PC stato:

Qualsiasi Live CD
http://free.avg.com/us-en/remove-sality
http://support.kaspersky.com/1874

Buona Fortuna!

[farbix89]

O cavolo...uno degli strumenti più utilizzati

TYVM

[leofelix]

Grazie dell'avviso Gromobud
ad onor del vero sono sempre stato piuttosto diffidente nei contronti di questo strumento

[devicepenguin]

TYVM

infettato da sampei.nrja ?

[Andy94]

infettato da sampei.nrja ?

È un'abbreviazione inglese che sta per "thank you very much".

[Gromobud]

Ragazzi, se avete letto Bleeping allora sapete forum la causa accidentale di infezione.
Ora il problema è risolto .
La confessione fatta allo sviluppatore:

I was infected. Actually not so unlikely since I have to on a daily basis, download/processes a large amount of malware specimens. After so many years, this is the first time which I unintentionally infected myself; reason being a faulty mice which triggered an unwanted double click within a zipped attachment of live samples. For those affected, I offer my deepest apologies. It was never my intention to distribute malware.

http://mcaf.ee/6ebft

Buona Fortuna!