Nueva variante de Fake Alert Renos muy poco controlada

El Katusha va descargando nuevas variante de Fake Alertv Renos, apenas controlados por los AV actuales (6 de 41)

Con la version actual del ELISTARA 22.86 ya controlamos esta variante
File name: sshnas21.dll
Submission date: 2011-03-24 12:19:58 (UTC)
Result: 6/ 41 (14.6%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.03.24.01 2011.03.24 –
AntiVir 7.11.5.57 2011.03.24 –
Antiy-AVL 2.0.3.7 2011.03.24 –
Avast 4.8.1351.0 2011.03.24 –
Avast5 5.0.677.0 2011.03.24 –
AVG 10.0.0.1190 2011.03.24 –
BitDefender 7.2 2011.03.24 –
CAT-QuickHeal 11.00 2011.03.24 –
ClamAV 0.96.4.0 2011.03.24 –
Commtouch 5.2.11.5 2011.03.24 W32/FakeAlert.KN.gen!Eldorado
Comodo 8087 2011.03.24 –
DrWeb 5.0.2.03300 2011.03.24 –
eSafe 7.0.17.0 2011.03.22 –
eTrust-Vet 36.1.8233 2011.03.24 Win32/Renos.D!generic
F-Prot 4.6.2.117 2011.03.23 W32/FakeAlert.KN.gen!Eldorado
F-Secure 9.0.16440.0 2011.03.23 –
Fortinet 4.2.254.0 2011.03.24 W32/PackZbot.D!tr
GData 21 2011.03.24 –
Ikarus T3.1.1.97.0 2011.03.24 –
Jiangmin 13.0.900 2011.03.24 –
K7AntiVirus 9.94.4201 2011.03.24 –
McAfee 5.400.0.1158 2011.03.24 –
McAfee-GW-Edition 2010.1C 2011.03.24 –
Microsoft 1.6702 2011.03.24 –
NOD32 5981 2011.03.24 –
Norman 6.07.03 2011.03.24 –
nProtect 2011-02-10.01 2011.02.15 –
Panda 10.0.3.5 2011.03.24 –
PCTools 7.0.3.5 2011.03.24 –
Prevx 3.0 2011.03.24 High Risk Cloaked Malware
Rising 23.50.03.06 2011.03.24 –
Sophos 4.64.0 2011.03.24 –
SUPERAntiSpyware 4.40.0.1006 2011.03.24 –
Symantec 20101.3.0.103 2011.03.24 –
TheHacker 6.7.0.1.156 2011.03.24 –
TrendMicro 9.200.0.1012 2011.03.24 –
TrendMicro-HouseCall 9.200.0.1012 2011.03.24 –
VBA32 3.12.14.3 2011.03.23 BScope.Trojan.MTA.0230
VIPRE 8803 2011.03.24 –
ViRobot 2011.3.24.4374 2011.03.24 –
VirusBuster 13.6.266.0 2011.03.23 –
Additional informationShow all
MD5   : bd8108125d55097b78d79cca9a58dac7
SHA1  : 49f66f117740b2c15c5362d9efbb85b0661e30b7

File size : 178688 bytes

publisher….: Jordan Russell
copyright….: Copyright (c) 2010 W Setup Technologies
product……: Y Internet Security UY
description..: X Setup Self-Extractor
original name: H Windows setup MXk.dll
internal name: H Windows setup MXk.dll
file version.: 3.0.0.0

Este FAKE ALERT es descargado por un Katusha dentro de la infeccion global del VBNA

saludos

ms, 24-3-2011