Author Topic: Use the mutex enumerator to find instances of malicious mutex on your system..  (Read 2222 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
Hi malware fighters,

Mutex

MUTual EXclusion object. Mutex is a program object that allows multiple threads to share the same resource. Any thread that needs the resource must lock the mutex from other threads while it is using the resource. The mutex is unlocked when it is no longer needed or the thread is terminated. The difference between mutex and semaphore is that a mutex is owned by the thread which locked it (that is, only the process which locked the mutex can unlock it). Whereas a semaphore can be changed by another thread or process.
Other specific tools for finding malicious mutex instances can be found here
http://www.softpanorama.org/Unixification/windows_process_viewers.shtml

Get the mutex enumerator, http://evilcodecave.blogspot.com/2010/06/just-little-gui-based-mutex-enumerator.html?showComment=1275675978316#c7237159814414838937

pol



Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!