Nueva variante de FAKE AV PRIVACY PROTECTION, casi no detectada por los actuales AV

Una nueva variante de malware nos ha sido enviada, cuando aun muy pocos abtivirus la detectan (solo 5 de 43)

Pasamos a controlarla a partir del ELISTARA de hoy 24.21

El preanalisis de virustotal ofrece el siguiente informe:
File name: privacy.exe
Submission date: 2011-11-07 15:36:57 (UTC)
Current status: finished
Result: 5 /43 (11.6%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.11.07.00 2011.11.07 –
AntiVir 7.11.17.35 2011.11.07 –
Antiy-AVL 2.0.3.7 2011.11.07 –
Avast 6.0.1289.0 2011.11.07 –
AVG 10.0.0.1190 2011.11.07 –
BitDefender 7.2 2011.11.07 –
ByteHero 1.0.0.1 2011.11.04 –
CAT-QuickHeal 11.00 2011.11.07 –
ClamAV 0.97.3.0 2011.11.07 –
Commtouch 5.3.2.6 2011.11.07 –
Comodo 10697 2011.11.07 –
DrWeb 5.0.2.03300 2011.11.07 –
Emsisoft 5.1.0.11 2011.11.07 –
eSafe 7.0.17.0 2011.11.07 –
eTrust-Vet 36.1.8657 2011.11.05 –
F-Prot 4.6.5.141 2011.11.07 –
F-Secure 9.0.16440.0 2011.11.07 –
Fortinet 4.3.370.0 2011.11.06 –
GData 22 2011.11.07 –
Ikarus T3.1.1.107.0 2011.11.07 –
Jiangmin 13.0.900 2011.11.07 –
K7AntiVirus 9.117.5404 2011.11.07 –
Kaspersky 9.0.0.837 2011.11.07 HEUR:Trojan.Win32.Generic
McAfee 5.400.0.1158 2011.11.07 –
McAfee-GW-Edition 2010.1D 2011.11.07 –
Microsoft 1.7801 2011.11.07 Rogue:Win32/FakeRean
NOD32 6608 2011.11.07 a variant of Win32/Kryptik.VBD
Norman 6.07.13 2011.11.07 W32/Krypt.BD
nProtect 2011-11-07.02 2011.11.07 –
Panda 10.0.3.5 2011.11.06 –
PCTools 8.0.0.5 2011.11.07 –
Prevx 3.0 2011.11.07 –
Rising 23.83.00.02 2011.11.07 –
Sophos 4.71.0 2011.11.07 Sus/UnkPack-C
SUPERAntiSpyware 4.40.0.1006 2011.11.05 –
Symantec 20111.2.0.82 2011.11.07 –
TheHacker 6.7.0.1.338 2011.11.06 –
TrendMicro 9.500.0.1008 2011.11.07 –
TrendMicro-HouseCall 9.500.0.1008 2011.11.07 –
VBA32 3.12.16.4 2011.11.04 –
VIPRE 10989 2011.11.07 –
ViRobot 2011.11.7.4759 2011.11.07 –
VirusBuster 14.1.51.0 2011.11.07 –
Additional informationShow all
MD5   : 06731ac0493a5ebc8a0a7124d1f40b7f
SHA1  : b52111711d533bd32294021aea3f25644c2892c9

File size : 833536 bytes

publisher….: JetBrains s.r.o
copyright….: Jttr Development Team
product……: Jttr Development Team
description..: Fuoydstomgnfwyyvaedopihhbgy
original name: Xsryej.ocx
internal name: Vuoeer.ocx
file version.: 5.3.3100.14093

Dicha version del ELISTARA 24.21 estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 7-11-2011