Nueva variante de FAKE ALERT SECURITY SHIELD

Una nueva variante de este fake/rogue pasa a ser controlada a partir del ELISTARA 24.35

El preanalisis con virustotal ofrece el siguiente informe:
File name: qungljf.exe
Submission date: 2011-11-25 10:26:44 (UTC)
Current status: finished
Result: 24 /41 (58.5%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.11.24.00 2011.11.24 Trojan/Win32.FakeAlert
AntiVir 7.11.18.71 2011.11.25 TR/Offend.KD.425669.1
Antiy-AVL 2.0.3.7 2011.11.25 Trojan/Win32.FakeAV.gen
Avast 6.0.1289.0 2011.11.25 Win32:Trojan-gen
AVG 10.0.0.1190 2011.11.24 Generic_r.AAY
BitDefender 7.2 2011.11.25 Trojan.Generic.KD.425669
ByteHero 1.0.0.1 2011.11.14 –
CAT-QuickHeal 12.00 2011.11.25 –
ClamAV 0.97.3.0 2011.11.25 –
Commtouch 5.3.2.6 2011.11.25 –
Comodo 10787 2011.11.24 UnclassifiedMalware
Emsisoft 5.1.0.11 2011.11.25 Trojan.Win32.FakeAV!IK
eSafe 7.0.17.0 2011.11.24 –
eTrust-Vet 37.0.9587 2011.11.25 Win32/PersonalSheild.A!generic
F-Prot 4.6.5.141 2011.11.25 –
F-Secure 9.0.16440.0 2011.11.25 Trojan.Generic.KD.425669
Fortinet 4.3.370.0 2011.11.25 W32/FakeAV.KL!tr
GData 22 2011.11.25 Trojan.Generic.KD.425669
Ikarus T3.1.1.109.0 2011.11.25 Trojan.Win32.FakeAV
Jiangmin 13.0.900 2011.11.24 Trojan/PersonalSheild.aa
K7AntiVirus 9.119.5534 2011.11.24 –
Kaspersky 9.0.0.837 2011.11.25 Trojan-FakeAV.Win32.SecurityShield.mo
McAfee 5.400.0.1158 2011.11.25 FakeAlert-SecurityTool.bt
McAfee-GW-Edition 2010.1D 2011.11.25 FakeAlert-SecurityTool.bt
Microsoft 1.7801 2011.11.25 Rogue:Win32/Winwebsec
NOD32 6658 2011.11.25 a variant of Win32/Kryptik.VZC
Norman 6.07.13 2011.11.24 –
nProtect 2011-11-25.01 2011.11.25 Gen:Variant.Graftor.5535
Panda 10.0.3.5 2011.11.24 Trj/CI.A
PCTools 8.0.0.5 2011.11.25 Trojan.Gen
Prevx 3.0 2011.11.25 –
Rising 23.85.04.01 2011.11.25 –
Sophos 4.71.0 2011.11.25 Mal/FakeAV-KL
SUPERAntiSpyware 4.40.0.1006 2011.11.24 Trojan.Agent/Gen-FakeAV
TheHacker 6.7.0.1.347 2011.11.24 –
TrendMicro 9.500.0.1008 2011.11.25 –
TrendMicro-HouseCall 9.500.0.1008 2011.11.25 –
VBA32 3.12.16.4 2011.11.24 –
VIPRE 11142 2011.11.25 –
ViRobot 2011.11.25.4793 2011.11.25 –
VirusBuster 14.1.83.1 2011.11.24 –
Additional informationShow all
MD5   : 6b9e7c6dfa4681c88d448af1de93d0b7
SHA1  : edd280157f9df41f04033126ff99e45f7236b5fd

File size : 361472 bytes

Dicha version del ELISTARA 24.35 que lo detecta y elimina, ya está disponible en nuestra web.
saludos

ms, 28-11-2011