Mas variantes del FAKE AV Antispyware

y del mismo dropper que generó el FAKE AV ANTISPYWARE anterior, nos ha generado estos dos ficheros que ya ha eliminado el AV de McAfee, pero que pasamos a controlar igualmente con el ELISTARA 22.99 de hoy
File name: Antivirus Antispyware.exe
Submission date: 2011-04-06 15:59:36 (UTC)
Current status: finished
Result: 12 /39 (30.8%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.04.06.02 2011.04.06 –
AntiVir 7.11.5.210 2011.04.06 TR/Crypt.XPACK.Gen
Antiy-AVL 2.0.3.7 2011.04.06 –
Avast 4.8.1351.0 2011.04.06 Win32:FakeAV-BCL
Avast5 5.0.677.0 2011.04.01 Win32:FakeAV-BCL
AVG 10.0.0.1190 2011.04.06 unknown virus Win32/DH.CAFF8202DC
BitDefender 7.2 2011.04.06 Gen:Trojan.Heur.FU.MI0@ayXUxbai
CAT-QuickHeal 11.00 2011.04.06 –
ClamAV 0.97.0.0 2011.04.06 –
Commtouch 5.2.11.5 2011.04.06 –
Comodo 8241 2011.04.06 –
eSafe 7.0.17.0 2011.04.04 –
eTrust-Vet 36.1.8256 2011.04.06 –
F-Prot 4.6.2.117 2011.04.06 –
F-Secure 9.0.16440.0 2011.04.06 –
Fortinet 4.2.254.0 2011.04.06 –
GData 22 2011.04.06 Gen:Trojan.Heur.FU.MI0@ayXUxbai
Ikarus T3.1.1.103.0 2011.04.06 Packed.Win32.Katusha
Jiangmin 13.0.900 2011.04.05 –
K7AntiVirus 9.96.4314 2011.04.06 –
McAfee 5.400.0.1158 2011.04.06 FakeAlert-CN.gen.e
McAfee-GW-Edition 2010.1C 2011.04.06 FakeAlert-CN.gen.e
Microsoft 1.6702 2011.04.06 –
NOD32 6019 2011.04.06 a variant of Win32/Kryptik.LWR
Norman 6.07.07 2011.04.06 –
Panda 10.0.3.5 2011.04.06 Trj/CI.A
PCTools 7.0.3.5 2011.04.04 –
Prevx 3.0 2011.04.06 –
Rising 23.52.02.06 2011.04.06 –
Sophos 4.64.0 2011.04.06 Troj/FakeAV-DBI
SUPERAntiSpyware 4.40.0.1006 2011.04.06 –
Symantec 20101.3.2.89 2011.04.06 –
TheHacker 6.7.0.1.168 2011.04.06 –
TrendMicro 9.200.0.1012 2011.04.06 –
TrendMicro-HouseCall 9.200.0.1012 2011.04.06 –
VBA32 3.12.14.3 2011.04.06 –
VIPRE 8937 2011.04.06 –
ViRobot 2011.4.6.4396 2011.04.06 –
VirusBuster 13.6.290.0 2011.04.06 –
Additional informationShow all
MD5   : 64c4a83298c2f1f04aa3b789fd806542
SHA1  : 6f8a871a58b3e3167fb5ef8267bf4fa882d6185e
SHA256: 5f9bdd8e2b3dccf2b72a8204d9c614183a3044f468b9c843699f91d9581851d1
File size : 2721792 bytes
publisher….: Tech Software Ltd.
copyright….: Copyright (C) 2011
product……: AntiVirus System
description..: Tech Software Ltd.
original name: AntiVirus System
internal name: AntiVirus System
file version.: 4, 1, 0, 5
comments…..: Tech Software Ltd.

y este otro
File name: securitymanager.exe
Submission date: 2011-04-06 16:01:31 (UTC)
Current status: queued queued analysing finished
Result: 14/ 41 (34.1%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.04.06.02 2011.04.06 –
AntiVir 7.11.5.210 2011.04.06 TR/Crypt.XPACK.Gen
Antiy-AVL 2.0.3.7 2011.04.06 –
Avast 4.8.1351.0 2011.04.06 –
Avast5 5.0.677.0 2011.04.01 –
AVG 10.0.0.1190 2011.04.06 unknown virus Win32/DH.CAFF8202DC
BitDefender 7.2 2011.04.06 Gen:Trojan.Heur.FU.gGW@a0HYg2mi
CAT-QuickHeal 11.00 2011.04.06 –
ClamAV 0.97.0.0 2011.04.06 –
Commtouch 5.2.11.5 2011.04.06 –
Comodo 8241 2011.04.06 –
DrWeb 5.0.2.03300 2011.04.06 Trojan.Fakealert.20411
eSafe 7.0.17.0 2011.04.04 –
eTrust-Vet 36.1.8256 2011.04.06 –
F-Prot 4.6.2.117 2011.04.06 –
F-Secure 9.0.16440.0 2011.04.06 Gen:Trojan.Heur.FU.gGW@a0HYg2mi
Fortinet 4.2.254.0 2011.04.06 –
GData 22 2011.04.06 Gen:Trojan.Heur.FU.gGW@a0HYg2mi
Ikarus T3.1.1.103.0 2011.04.06 Packed.Win32.Katusha
Jiangmin 13.0.900 2011.04.05 –
K7AntiVirus 9.96.4314 2011.04.06 –
Kaspersky 7.0.0.125 2011.04.06 –
McAfee 5.400.0.1158 2011.04.06 –
McAfee-GW-Edition 2010.1C 2011.04.06 Heuristic.BehavesLike.Win32.Obfuscated.H
Microsoft 1.6702 2011.04.06 Rogue:Win32/FakeRean
NOD32 6019 2011.04.06 a variant of Win32/Kryptik.LWR
Norman 6.07.07 2011.04.06 –
Panda 10.0.3.5 2011.04.06 Trj/CI.A
PCTools 7.0.3.5 2011.04.04 Trojan.Gen
Prevx 3.0 2011.04.06 –
Rising 23.52.02.06 2011.04.06 –
Sophos 4.64.0 2011.04.06 Mal/FakeAV-JO
SUPERAntiSpyware 4.40.0.1006 2011.04.06 –
Symantec 20101.3.2.89 2011.04.06 Trojan.Gen
TheHacker 6.7.0.1.168 2011.04.06 –
TrendMicro 9.200.0.1012 2011.04.06 –
TrendMicro-HouseCall 9.200.0.1012 2011.04.06 –
VBA32 3.12.14.3 2011.04.06 –
VIPRE 8937 2011.04.06 –
ViRobot 2011.4.6.4396 2011.04.06 –
VirusBuster 13.6.290.0 2011.04.06 –
Additional informationShow all
MD5   : 3c2ab5dc7f9686443d55e3ae70d83033
SHA1  : f2129effa8113a8aa566dcc8fb54002d8cf450eb

File size : 99328 bytes

Como se ve, tambien son detectados actualmente  por pocos AV (12 Y 14 DE 39 Y 41 respectivamente)

El ELISTARA 22.99 que los controla y elimina, estará disponible en esta web a partir de las 19 h CET de hoy

saludos

ms, 6-4-2011