Otra variante de FAKE AV MSEA (MICROSOFT SECURITY EMERGENCY ALERT)

Como ya publicamos recientemente, navegando por algunas webs aparece una pagina azul de analisis del THINK POINT que si se acepta instala este falso antivirus “MICROSOFT SECURITY EMERGENCY ALERT

Se trata de una nueva variante aun poco controlada actualmente (20 de 43) :
ile name: HOTFIX.EXE.Muestra EliStartPage v21.91
Submission date: 2010-11-02 17:08:23 (UTC)
Current status: queued queued analysing finished
Result: 20/ 43 (46.5%)
 VT Community

malware
 Safety score: 0.0% 
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2010.11.02.00 2010.11.01 Malware/Win32.Generic
AntiVir 7.10.13.106 2010.11.02 –
Antiy-AVL 2.0.3.7 2010.11.02 –
Authentium 5.2.0.5 2010.11.02 W32/FakeAlert.IG.gen!Eldorado
Avast 4.8.1351.0 2010.11.02 Win32:FakeAlert-RW
Avast5 5.0.594.0 2010.11.02 Win32:FakeAlert-RW
AVG 9.0.0.851 2010.11.02 Generic4.AUDJ
BitDefender 7.2 2010.11.02 Trojan.FakeAlert.CGP
CAT-QuickHeal 11.00 2010.10.26 –
ClamAV 0.96.2.0-git 2010.11.02 –
Comodo 6591 2010.11.02 –
DrWeb 5.0.2.03300 2010.11.02 Trojan.FakeAV.1002
Emsisoft 5.0.0.50 2010.11.02 –
eSafe 7.0.17.0 2010.11.02 Suspicious File
eTrust-Vet 36.1.7950 2010.11.02 –
F-Prot 4.6.2.117 2010.11.02 W32/FakeAlert.IG.gen!Eldorado
F-Secure 9.0.16160.0 2010.11.02 Rogue:W32/ControlCenter.F
Fortinet 4.2.249.0 2010.11.02 –
GData 21 2010.11.02 Trojan.FakeAlert.CGP
Ikarus T3.1.1.90.0 2010.11.02 –
Jiangmin 13.0.900 2010.11.02 –
K7AntiVirus 9.67.2893 2010.11.02 Riskware
Kaspersky 7.0.0.125 2010.11.02 –
McAfee 5.400.0.1158 2010.11.02 FakeAlert-PJ
McAfee-GW-Edition 2010.1C 2010.11.02 Heuristic.BehavesLike.Win32.ModifiedUPX.C!87
Microsoft 1.6301 2010.11.02 Rogue:Win32/FakePAV
NOD32 5585 2010.11.02 a variant of Win32/Adware.FakeAntiSpy.M
Norman 6.06.10 2010.11.02 –
nProtect 2010-11-02.01 2010.11.02 Trojan/W32.Agent.521728.S
Panda 10.0.2.7 2010.11.02 Suspicious file
PCTools 7.0.3.5 2010.11.02 –
Prevx 3.0 2010.11.02 –
Rising 22.72.00.03 2010.11.02 –
Sophos 4.59.0 2010.11.02 Mal/FakeAV-FO
Sunbelt 7197 2010.11.02 Trojan.Win32.Generic.pak!cobra
SUPERAntiSpyware 4.40.0.1006 2010.11.02 –
Symantec 20101.2.0.161 2010.11.02 –
TheHacker 6.7.0.1.075 2010.11.02 –
TrendMicro 9.120.0.1004 2010.11.02 –
TrendMicro-HouseCall 9.120.0.1004 2010.11.02 –
VBA32 3.12.14.1 2010.11.01 –
ViRobot 2010.10.4.4074 2010.11.02 –
VirusBuster 12.70.16.0 2010.11.02 –
Additional informationShow all 
MD5   : c47396019e082b8d5a5287e017800730

File size : 521728 bytes
A partir del ELISTARA de hoy, 21.92 ya se controla y elimina igual que la version anterior publicada la semana pasada.

saludos

ms, 2-11-2010