Nueva variante de FAKE AV ZENTOM SYS GUARD

Una nueva variante de esta FAKE AV pasa a ser controlada a partir del ELISTSRA 24.09 de hoy
El preanalisis de VirusTotal ofrece este informe:
File name: KB11053974.exe.vir
Submission date: 2011-10-17 13:44:25 (UTC)
Current status: queued (#1) queued (#2) analysing finished
Result: 29/ 41 (70.7%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.10.16.00 2011.10.17 Trojan/Win32.FakeAV
AntiVir 7.11.16.25 2011.10.17 TR/Crypt.EPACK.Gen2
Antiy-AVL 2.0.3.7 2011.10.17 Trojan/Win32.Diple.gen
Avast 6.0.1289.0 2011.10.17 Win32:FakeAlert-BHA [Trj]
AVG 10.0.0.1190 2011.10.17 Downloader.Zlob.BDCV
BitDefender 7.2 2011.10.17 Gen:Variant.Kazy.39046
ByteHero 1.0.0.1 2011.09.23 –
CAT-QuickHeal 11.00 2011.10.17 –
ClamAV 0.97.0.0 2011.10.17 –
Commtouch 5.3.2.6 2011.10.17 –
Comodo 10474 2011.10.17 Heur.Suspicious
DrWeb 5.0.2.03300 2011.10.17 Trojan.DownLoader5.1485
Emsisoft 5.1.0.11 2011.10.17 Win32.SuspectCrc!IK
eSafe 7.0.17.0 2011.10.17 Win32.Trojan
eTrust-Vet 36.1.8623 2011.10.17 –
F-Prot 4.6.5.141 2011.10.17 –
F-Secure 9.0.16440.0 2011.10.17 Gen:Variant.Kazy.39046
Fortinet 4.3.370.0 2011.10.17 W32/Kryptik.CQW!tr
GData 22 2011.10.17 Gen:Variant.Kazy.39046
Ikarus T3.1.1.107.0 2011.10.17 Win32.SuspectCrc
Jiangmin 13.0.900 2011.10.17 –
K7AntiVirus 9.115.5290 2011.10.17 Riskware
Kaspersky 9.0.0.837 2011.10.17 Trojan.Win32.Diple.cbsw
McAfee 5.400.0.1158 2011.10.17 Generic FakeAlert.em
McAfee-GW-Edition 2010.1D 2011.10.17 Generic FakeAlert.em
Microsoft 1.7702 2011.10.17 Rogue:Win32/FakeYak
NOD32 6550 2011.10.17 a variant of Win32/Kryptik.TPX
Panda 10.0.3.5 2011.10.17 Generic Trojan
PCTools 8.0.0.5 2011.10.17 Trojan.Gen
Prevx 3.0 2011.10.17 –
Rising 23.80.00.01 2011.10.17 –
Sophos 4.70.0 2011.10.17 Mal/FakeAV-OQ
SUPERAntiSpyware 4.40.0.1006 2011.10.17 Trojan.Agent/Gen-FraudScan[Prod]
Symantec 20111.2.0.82 2011.10.17 Trojan.Gen.2
TheHacker 6.7.0.1.325 2011.10.17 –
TrendMicro 9.500.0.1008 2011.10.17 TROJ_FAKEAV.VTG
TrendMicro-HouseCall 9.500.0.1008 2011.10.17 TROJ_FAKEAV.VTG
VBA32 3.12.16.4 2011.10.17 –
VIPRE 10788 2011.10.17 FraudTool.Win32.FakeRean.a (v)
ViRobot 2011.10.17.4723 2011.10.17 –
VirusBuster 14.1.15.0 2011.10.17 Trojan.Kryptik!6uud4cxntds
Additional informationShow all
MD5   : 102d8e50266f6180dab0b7422311c7b9
SHA1  : 3c4ee8fe330ba17b55296f4b6fde3a8f55ca323d
File size : 2439680 bytes
publisher….: (c)if systems
copyright….: (c)if systems Corp All Rights reserved
product……: ElevateSoft Group
description..: ElevateSoft Group
original name: feociw.exe
internal name: feociw
file version.: 6.R51.52967T RC3.50e alpha

Dicha version del ELISTARA 24.09 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 17-10-2011