
Disttrack/Shamoon Malware Overwrites Files
Last week reports of Disttrack/Shamoon malware, which overwrites files and infects the Master Boot Record (MBR) of infected systems, surfaced. Trend Micro detects the said malware as WORM_DISTTRACK.A via pattern file 9.328.04.
Currently, its arrival method is still undetermined. It is found to spread to other computers by dropping copies of itself in administrative shares. Its dropped copy may use file names such as clean.exe or dvdquery.exe.
How it works:
Shamoon is unusual because it goes to great lengths to ensure destroyed
data can never be recovered, something that is rarely seen in targeted
attacks. It has self-propagation capabilities that allow it to spread
from computer to computer using shared network disks. It drops two
primary components:
TROJ_WIPMBR.A and TROJ_DISTTRACK.A.
TROJ_WIPMBR.A gathers the files to be infected in the computer. It then
overwrites disks with a small portion of a JPEG image found on the
Internet. Once overwritten, these files can no longer be restored or
opened.
On the other hand, TROJ_DISTTRACK.A serves as the
communicator. TROJ_WIPMBR.A passes the list of files it infects to
TROJ_DISTTRACK.A. TROJ_DISTTRACK.A then creates a connection to an IP
and sends the list of files, along with the IP address of the infected
computer. It also uses what appears to be a legitimate system driver to
gain low-level access to a hard drive so it can wipe the master boot
record Windows machines rely on to boot up. The malware also reports
back to the attackers with information about the number of files that
were destroyed, the IP address of the infected computer, and a random
number.
How to identify an infection:
Unlike most malware, which rarely destroy files or wipe the Master Boot Record, Shamoon cripples the victims computer once it has stolen the data and is rendered unusable. However PC virus logs will still be able to indicate whether an infection has occurred.
How can Trend Micro protect you:
Trend Micro's solutions supported by the Trend Micro™ Smart Protection Network™ can detect and prevent the execution of the malicious files via file reputation technology.
Deep Security 8 provides a comprehensive, adaptive, and highly efficient server security platform that protects enterprise applications and data from breaches and business disruptions without expensive emergency patching. It's modules provide agentless and agent-based protection, including anti-malware, intrusion detection and prevention, firewall, web application protection, integrity monitoring, and log inspection.
OfficeScan 10.6 detects and block more threats, as proven in real-world tests, whilst the IDF plug-in, improves visibility of security status, enabling more rapid identification of threats and faster incident response
Mobile Security 8 reduces security risks by ensuring the proper device configurations and adds protections to prevent malware and reduce the risk of compromised devices
اخبار تهدیدات و ویروسها در دیسنا
دیسنا - پایگاه اطلاع رسانی امنیت اطلاعات ایران .
Adapting Security to Today,S Data Center
دیسنا - پایگاه اطلاع رسانی امنیت اطلاعات ایران .

گروه هایی که ترندمیکرو نام برده است شامل موارد زیر می شوند :
جهت مشاهده متن کامل تهدیدات به لینک زیر مراجعه نمائید .
دیسنا - پایگاه اطلاع رسانی امنیت اطلاعات ایران .



![]()
![]()
![]()
![]()
![]()
![]()
![]()
![]()
DELL - HP - AMAZON - SAVVIS - NTT AMERICA - فقط بخشی از مشتریان شرکت ترندمیکرو هستند .
این برنامه به شرکای ابری ترندمیکرو اجازه می دهد تا سازگاری محصولات
ترندمیکرو را در زیر ساختهای ابری خود مورد بررسی و تائید قرار دهند .
دیسنا - پایگاه اطلاع رسانی امنیت اطلاعات ایران .
حال شرکت ترندمیکرو نسخه جدید از این محصول را با ویژگی های جدید و البته بهینه شده در اختیار مشتریانش قرار می دهد .
برخی از ویژگی های جدید نسخه 9 محصول Deep Security به شرح زیر است :
What's NEW in Trend Micro Deep Security 9
Integration into vCloud Director and Amazon Web Services, as well as a unified management console, enables organizations to extend their data center security to workloads in VMware vCloud® and Amazon-based public cloud workloads enforcing the same corporate policies across both environments and managing the security of both environments through a single pane of glass.
Support for latest VMware releases – vSphere 5.1 and vCloud Networking and Security 5.1Deep Security 9 will support VMware vSphere® 5.1 and vCloud Networking and Security™ (vCNS). This release will mark the product's 4th generation of integration with VMware products.
Enhancements to Deep Security Agentless Platform to include improved performance through VMware ESX® level caching and deduplication, and recommendation scans that take the guesswork out of tuning security policies.
Hypervisor integrity monitoring in Deep Security 9 extends security and compliance of virtualized systems to the hypervisor. By utilizing Intel TPM/TXT technology, Deep Security 9 is able to monitor for any unauthorized changes to the hypervisor thereby helping organizations meet evolving compliance requirements like PCI DSS Virtualization Guidelines.
Deep Security 9 has an agile multi-tenant architecture for software-defined data centers and providers that enables logical separation of tenant policies and data, allows delegation and self-service for tenants, and supports elastic cloud-scaling with automated deployment and provisioning of Deep Security components. RESTful management APIs also facilitates extensibility and integration into modern cloud infrastructure.
دیسنا - پایگاه اطلاع رسانی امنیت اطلاعات ایران .
همچنین دوره جدید ارائه
محصولات ترندمیکرو با تخفیف که ویژه دارندگان تجهیزات ایسوس ASUS می باشد
آغاز شده و افرادی که درخواست خرید این محصولات را دارند به قسمت پایین
صفحه سفارش خرید > محصولات خانگی وب سایت این شرکت مراجعه نمایند .
واحد اطلاع رسانی شرکت دورانتاش
www.durantash.com
www.DDN.ir
امنیت ، هدیه ما به شماست .
خریدی مطمئن و امن ، دریافت کالای معتبر ، گارانتی معتبر و پشتیبانی فنی بلادرنگ .
محصولات آنتی ویروس را فقط با گارانتی و پشتیبانی فنی دورانتاش تهیه نمائید .
مقایسه آنتی ویروسهای Kpure و TMMX
مقایسه آنتی ویروسهای KIS و TMIS
دیسنا - پایگاه اطلاع رسانی امنیت اطلاعات ایران .
MP4 - 15 MB
اخبار ترندمیکرو در دیسنا
دیسنا - پایگاه اطلاع رسانی امنیت اطلاعات ایران .
گزارش : کسپرسکی در ایران پولهایش را صرف چه می کند ؟ ( قسمت اول )

دیسنا - پایگاه اطلاع رسانی امنیت اطلاعات ایران .