Variante de AUTOIT-AO que llega en fichero MARSIANO.EXE

Variante de AUTOIT-AO  que aun lo controlan pocos antivirus, (19 de 43), si bien ya es controlada por el ELISTARA actual, 21.92:
File name: Marsiano.exe
Submission date: 2010-11-03 09:48:03 (UTC)
Current status: queued queued analysing finished
Result: 19/ 43 (44.2%)
 VT Community

not reviewed
 Safety score: – 
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2010.11.03.02 2010.11.03 –
AntiVir 7.10.13.108 2010.11.03 –
Antiy-AVL 2.0.3.7 2010.11.03 –
Authentium 5.2.0.5 2010.11.03 –
Avast 4.8.1351.0 2010.11.02 BV:Malware-gen
Avast5 5.0.594.0 2010.11.02 BV:Malware-gen
AVG 9.0.0.851 2010.11.02 Generic2_c.ZQH
BitDefender 7.2 2010.11.03 Application.Startup.H
CAT-QuickHeal 11.00 2010.10.26 –
ClamAV 0.96.2.0-git 2010.11.02 PUA.Packed.ASPack
Comodo 6600 2010.11.03 Heur.Suspicious
DrWeb 5.0.2.03300 2010.11.03 –
Emsisoft 5.0.0.50 2010.11.03 Trojan.Win32.Autoit.ao!IK
eSafe 7.0.17.0 2010.11.02 –
eTrust-Vet 36.1.7952 2010.11.03 –
F-Prot 4.6.2.117 2010.11.03 –
F-Secure 9.0.16160.0 2010.11.03 Application.Startup.H
Fortinet 4.2.249.0 2010.11.03 –
GData 21 2010.11.03 Application.Startup.H
Ikarus T3.1.1.90.0 2010.11.03 Trojan.Win32.Autoit.ao
Jiangmin 13.0.900 2010.11.03 –
K7AntiVirus 9.67.2893 2010.11.02 –
Kaspersky 7.0.0.125 2010.11.03 Worm.Win32.AutoIt.zp
McAfee 5.400.0.1158 2010.11.03 Artemis!7CF29821E459
McAfee-GW-Edition 2010.1C 2010.11.03 Artemis!7CF29821E459
Microsoft 1.6301 2010.11.03 –
NOD32 5587 2010.11.03 –
Norman 6.06.10 2010.11.02 –
nProtect 2010-11-03.01 2010.11.03 Application.Startup.H
Panda 10.0.2.7 2010.11.02 –
PCTools 7.0.3.5 2010.11.03 –
Prevx 3.0 2010.11.03 –
Rising 22.72.01.03 2010.11.03 –
Sophos 4.59.0 2010.11.03 –
Sunbelt 7202 2010.11.03 Trojan.Win32.AutoIt.gen.1 (v)
SUPERAntiSpyware 4.40.0.1006 2010.11.03 –
Symantec 20101.2.0.161 2010.11.03 –
TheHacker 6.7.0.1.075 2010.11.02 Trojan/Dropper.gen
TrendMicro 9.120.0.1004 2010.11.03 Possible_AUMAL-1
TrendMicro-HouseCall 9.120.0.1004 2010.11.03 Possible_AUMAL-1
VBA32 3.12.14.1 2010.11.01 Worm.AutoIt.zp
ViRobot 2010.10.4.4074 2010.11.03 –
VirusBuster 12.71.2.1 2010.11.02 –
Additional informationShow all 
MD5   : 7cf29821e4597319e45e3d9151ae376d
SHA1  : 6eff787a72c57540ca30fcb3736987de22d92d38

File size : 888097 bytes

Cuidado que ni AVIRA, ni DRWEB, ni CAI, ni E-SAFE, ni F.PROT, ni Fortinet, ni Microsoft, ni NOD32, ni Panda, ni Sophos, ni Symantec, ni Trend aun no lo controlan, por lo que es facil que pulule  por Internet sin ser interceptado

Con el ELISTARA actual 21.92 hemos visto que ya se detecta y elimina.

saludos

ms, 3-11-2010