NUEVA VARIANTE DE FAKE AV “SPYWARE PROTECTION”

COn la version del ELISTARA 22.99 de hoy, controlamos y eliminamos dicha variante.

El preanalisis de VirusTotal ofrece el siguiente informe:
File name: defender.vir
Submission date: 2011-04-06 09:58:57 (UTC)

Result: 16/ 41 (39.0%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.04.06.02 2011.04.06 –
AntiVir 7.11.5.204 2011.04.06 TR/Crypt.XPACK.Gen2
Antiy-AVL 2.0.3.7 2011.04.06 –
Avast 4.8.1351.0 2011.04.06 Win32:FakeAlert-AER
Avast5 5.0.677.0 2011.04.01 –
AVG 10.0.0.1190 2011.04.06 –
BitDefender 7.2 2011.04.06 Trojan.Generic.KDV.179807
CAT-QuickHeal 11.00 2011.04.06 (Suspicious) – DNAScan
ClamAV 0.97.0.0 2011.04.06 –
Commtouch 5.2.11.5 2011.04.06 –
Comodo 8239 2011.04.06 –
DrWeb 5.0.2.03300 2011.04.06 –
eSafe 7.0.17.0 2011.04.04 –
eTrust-Vet 36.1.8256 2011.04.06 –
F-Prot 4.6.2.117 2011.04.06 –
F-Secure 9.0.16440.0 2011.04.06 –
Fortinet 4.2.254.0 2011.04.06 W32/Krap.AON!tr
GData 22 2011.04.06 Trojan.Generic.KDV.179807
Ikarus T3.1.1.103.0 2011.04.06 Trojan.Crypt
Jiangmin 13.0.900 2011.04.05 –
K7AntiVirus 9.96.4303 2011.04.06 –
Kaspersky 7.0.0.125 2011.04.06 Trojan.Win32.FakeAV.cike
McAfee 5.400.0.1158 2011.04.06 Generic FakeAlert.am
McAfee-GW-Edition 2010.1C 2011.04.06 Artemis!1388DCA6A0F4
Microsoft 1.6702 2011.04.06 Rogue:Win32/FakeRean
NOD32 6017 2011.04.06 a variant of Win32/Kryptik.MHY
Norman 6.07.07 2011.04.06 –
Panda 10.0.3.5 2011.04.06 Suspicious file
PCTools 7.0.3.5 2011.04.04 –
Prevx 3.0 2011.04.06 –
Rising 23.52.02.03 2011.04.06 –
Sophos 4.64.0 2011.04.06 Mal/FakeAV-EA
SUPERAntiSpyware 4.40.0.1006 2011.04.03 Trojan.Agent/Gen-FakeDefender
Symantec 20101.3.2.89 2011.04.06 –
TheHacker 6.7.0.1.168 2011.04.06 –
TrendMicro 9.200.0.1012 2011.04.05 –
TrendMicro-HouseCall 9.200.0.1012 2011.04.05 –
VBA32 3.12.14.3 2011.04.06 –
VIPRE 8933 2011.04.06 Trojan.Win32.FakeAv.awrp (v)
ViRobot 2011.4.6.4396 2011.04.06 –
VirusBuster 13.6.288.0 2011.04.06 –
Additional informationShow all
MD5   : 1388dca6a0f447f119e5710462627b70
SHA1  : 5e50315e17f6af78c99d5fc68c000a916e165d0c

File size : 1011712 bytes
publisher….: Defender Software
copyright….: n/a
product……: n/a
description..: n/a
original name: n/a
internal name: Defender Software
file version.: 1.4.0.0

La version 22.99 del ELISTARA que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CET de hoy

saludos

ms, 6-4-2011