New malware

[anything I don't mind]

I removed this malware from a work laptop today, it was malware protection 360.

It created a process that intercepted ssl certicates and swapped them out with a remote fiddler proxy. Fiddler is a http sniffer. Essentially hijacking all logins that occur during ssl sessions.

 

[bigjonnyauk]

how did you get rid of it and does the usual software like malware bytes detect it ?

 

[purplesky]

It sounds like a good one.
I collect viruses and malware. Could I have a copy for my collection please?

 

[V F]

It sounds like a good one.
I collect viruses and malware. Could I have a copy for my collection please?

 

[anything I don't mind]

how did you get rid of it and does the usual software like malware bytes detect it ?

Ran rkill then combofix. I ran adwcleaner first and that did not remove it. Sophos was installed.

 

[opethdisciple]

 

[gpuerrilla]

Interesting, so sophos does not spot it then, or was it just not updated by the user and ran?