SONAR 4 of Norton 360 fails against Trojan-Ransom.Win32.Xorist

Norton Security | Norton Internet Security
1

Just watch the video.

http://vimeo.com/41875498

 

https://www.virustotal.com/file/5b97a4f978a7099f37fe8f67304f408438ca549c1a1e4dfe6a865367c02bcb65/analysis/

 

Please improve your Sonar!

2

Note:

 

There are many different droppers and variations appearing,   The encryption is easily reversed with theis group.

 

Quads

3

:smileymad:
[img]http://www.cx-7.info/g.php[/img]
  

4

The Xorist code is somewhat open source, so anyone bad enough can use the code to create one.

 

http://www.threatexpert.com/report.aspx?md5=a64383a56249aada17d329877e9d9769

 

Decrypt tools are available by Dr Web Trojan.Encoder series or http://support.kaspersky.com/faq/?qid=208280932

 

Quads