Nueva detección de ONLINE GAMES de última generacion (EXE y DLL)

Con el ELISTARA 22.41 de hoy, pasamos a controlar tanto el EXE como la DLL de esta nueva variante de ONLINE GAME de ultima generacion actual. El hecho de que solo 9 ó 10 de los 42 AV de VirusTotal lo detecten actualmente es sintomatico de lo reciente que es:

fichero .EXE:

File name: ARKING.EXE.Muestra EliStartPage v22.39
Submission date: 2011-01-18 09:16:34 (UTC)
Result: 9/ 42 (21.4%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.18.00 2011.01.17 –
AntiVir 7.11.1.164 2011.01.18 –
Antiy-AVL 2.0.3.7 2011.01.18 –
Avast 4.8.1351.0 2011.01.17 –
Avast5 5.0.677.0 2011.01.17 –
AVG 10.0.0.1190 2011.01.18 –
BitDefender 7.2 2011.01.18 –
CAT-QuickHeal 11.00 2011.01.18 –
ClamAV 0.96.4.0 2011.01.18 PUA.Packed.ASPack
Commtouch 5.2.11.5 2011.01.18 –
Comodo 7429 2011.01.18 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.2.03300 2011.01.18 Trojan.DownLoader1.55295
Emsisoft 5.1.0.1 2011.01.18 Packed.Win32.Klone!IK
eSafe 7.0.17.0 2011.01.17 –
eTrust-Vet 36.1.8105 2011.01.17 –
F-Prot 4.6.2.117 2011.01.17 –
F-Secure 9.0.16160.0 2011.01.18 –
Fortinet 4.2.254.0 2011.01.16 –
GData 21 2011.01.17 –
Ikarus T3.1.1.97.0 2011.01.18 Packed.Win32.Klone
Jiangmin 13.0.900 2011.01.18 –
K7AntiVirus 9.77.3570 2011.01.18 –
Kaspersky 7.0.0.125 2011.01.18 –
McAfee 5.400.0.1158 2011.01.18 Artemis!0EB689534019
McAfee-GW-Edition 2010.1C 2011.01.17 Artemis!0EB689534019
Microsoft 1.6402 2011.01.18 –
NOD32 5795 2011.01.17 –
Norman 6.06.12 2011.01.18 –
nProtect 2011-01-18.01 2011.01.18 –
Panda 10.0.2.7 2011.01.17 Suspicious file
PCTools 7.0.3.5 2011.01.18 –
Prevx 3.0 2011.01.18 Medium Risk Malware
Rising 22.83.01.03 2011.01.18 –
Sophos 4.61.0 2011.01.18 –
SUPERAntiSpyware 4.40.0.1006 2011.01.18 –
Symantec 20101.3.0.103 2011.01.18 –
TheHacker 6.7.0.1.115 2011.01.14 –
TrendMicro 9.120.0.1004 2011.01.18 –
TrendMicro-HouseCall 9.120.0.1004 2011.01.18 –
VBA32 3.12.14.2 2011.01.17 –
VIPRE 8108 2011.01.18 –
ViRobot 2011.1.18.4260 2011.01.18 –
Additional informationShow all
MD5   : 0eb689534019a1a9a790d8beee8ea44f
SHA1  : b450d03e2856809a063e7ec3a5106c6d68ea6704

File size : 192000 bytes

_______________________

y la DLL complementaria:

File name: ARKING1.DLL.Muestra EliStartPage v22.39
Submission date: 2011-01-18 09:29:26 (UTC)
Current status: queued queued (#9) analysing finished
Result: 10/ 42 (23.8%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.18.00 2011.01.17 –
AntiVir 7.11.1.164 2011.01.18 –
Antiy-AVL 2.0.3.7 2011.01.18 –
Avast 4.8.1351.0 2011.01.17 –
Avast5 5.0.677.0 2011.01.17 –
AVG 10.0.0.1190 2011.01.18 –
BitDefender 7.2 2011.01.18 –
CAT-QuickHeal 11.00 2011.01.18 –
ClamAV 0.96.4.0 2011.01.18 PUA.Packed.ASPack
Commtouch 5.2.11.5 2011.01.18 –
Comodo 7429 2011.01.18 –
DrWeb 5.0.2.03300 2011.01.18 –
eSafe 7.0.17.0 2011.01.17 –
eTrust-Vet 36.1.8105 2011.01.17 –
F-Prot 4.6.2.117 2011.01.17 –
F-Secure 9.0.16160.0 2011.01.18 –
Fortinet 4.2.254.0 2011.01.16 –
GData 21 2011.01.17 –
Ikarus T3.1.1.97.0 2011.01.18 Trojan-GameThief.Win32.Magania
Jiangmin 13.0.900 2011.01.18 –
K7AntiVirus 9.77.3570 2011.01.18 –
Kaspersky 7.0.0.125 2011.01.18 –
McAfee 5.400.0.1158 2011.01.18 Generic PWS.y!cwk
McAfee-GW-Edition 2010.1C 2011.01.18 Artemis!E317C29901AF
Microsoft 1.6402 2011.01.18 PWS:Win32/Frethog.F
NOD32 5795 2011.01.17 –
Norman 6.06.12 2011.01.18 –
nProtect 2011-01-18.01 2011.01.18 –
Panda 10.0.2.7 2011.01.17 Suspicious file
PCTools 7.0.3.5 2011.01.18 –
Prevx 3.0 2011.01.18 Medium Risk Malware
Rising 22.83.01.03 2011.01.18 Trojan.Win32.Generic.525F4048
Sophos 4.61.0 2011.01.18 –
SUPERAntiSpyware 4.40.0.1006 2011.01.18 –
Symantec 20101.3.0.103 2011.01.18 –
TheHacker 6.7.0.1.115 2011.01.14 –
TrendMicro 9.120.0.1004 2011.01.18 Mal_OLGM-41
TrendMicro-HouseCall 9.120.0.1004 2011.01.18 Mal_OLGM-41
VBA32 3.12.14.2 2011.01.17 –
VIPRE 8108 2011.01.18 –
ViRobot 2011.1.18.4260 2011.01.18 –
VirusBuster 13.6.151.0 2011.01.17 –
Additional informationShow all
MD5   : e317c29901aff13d3665c54f12e853f4
SHA1  : e3e69e37819aa535a4090af06e0adeac6f11aec8
File size : 122880 bytes

A partir de las 19 horas de hoy dicha version 22.41 del ELISTARA que los detecta y elimina, estará disponible en nuestra web

saludos

ms, 18-1-2011