Nueva variante de malware que pasamos a controlar como MALWARE CLICK POTATO

Dos nuevas variantes de este malware pasan a ser controladas a partir del ELISTARA 24.47 de hoy

Los peanalisis de virustotal ofrecen en siguiente informe:

File name: CLICKPOTATOLITESAAX.DLL.Muestra EliStartPage v24.46
Submission date: 2011-12-16 14:09:13 (UTC)

Result: 31/ 43 (72.1%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.12.16.04 2011.12.16 Adware/Win32.HotBar
AntiVir 7.11.19.149 2011.12.16 ADSPY/AdSpy.Gen2
Antiy-AVL 2.0.3.7 2011.12.16 AdWare/Win32.HotBar.gen
Avast 6.0.1289.0 2011.12.16 Win32:Adware-gen
AVG 10.0.0.1190 2011.12.16 Zango
BitDefender 7.2 2011.12.16 Gen:Adware.Heur.ru9@RWPrYlii
ByteHero 1.0.0.1 2011.12.07 –
CAT-QuickHeal 12.00 2011.12.16 –
ClamAV 0.97.3.0 2011.12.16 Suspect.W32.AdInstall
Commtouch 5.3.2.6 2011.12.16 –
Comodo 10978 2011.12.16 UnclassifiedMalware
DrWeb 5.0.2.03300 2011.12.16 –
Emsisoft 5.1.0.11 2011.12.16 AdWare.Win32.ClickPotato!IK
eSafe 7.0.17.0 2011.12.15 –
eTrust-Vet 37.0.9627 2011.12.16 Win32/Zango.Pinball
F-Prot 4.6.5.141 2011.12.15 –
F-Secure 9.0.16440.0 2011.12.16 Gen:Adware.Heur.ru9@RWPrYlii
Fortinet 4.3.388.0 2011.12.16 Adware/PlatriumSA
GData 22.308/22.581 2011.12.16 Gen:Adware.Heur.ru9@RWPrYlii
Ikarus T3.1.1.109.0 2011.12.16 AdWare.Win32.ClickPotato
Jiangmin 13.0.900 2011.12.15 Adware/HotBar.aa
K7AntiVirus 9.119.5696 2011.12.15 –
Kaspersky 9.0.0.837 2011.12.16 –
McAfee 5.400.0.1158 2011.12.16 Adware-HotBar.g
McAfee-GW-Edition 2010.1E 2011.12.16 Adware-HotBar.g
Microsoft 1.7903 2011.12.16 Adware:Win32/ClickPotato
NOD32 6717 2011.12.16 probably a variant of Win32/Adware.HotBar.E
Norman 6.07.13 2011.12.16 –
nProtect 2011-12-16.01 2011.12.16 Trojan-Clicker/W32.HotBar.283952
Panda 10.0.3.5 2011.12.16 –
PCTools 8.0.0.5 2011.12.16 Adware.Clickpotato
Prevx 3.0 2011.12.16 –
Rising 23.88.03.02 2011.12.16 Trojan.Win32.Generic.12825033
Sophos 4.72.0 2011.12.16 Hotbar
SUPERAntiSpyware 4.40.0.1006 2011.12.16 Adware.Zango-Heur
Symantec 20111.2.0.82 2011.12.16 Adware.Clickpotato
TheHacker 6.7.0.1.359 2011.12.15 –
TrendMicro 9.500.0.1008 2011.12.16 ADW_CLICKPOTATO
TrendMicro-HouseCall 9.500.0.1008 2011.12.16 ADW_CLICKPOTATO
VBA32 3.12.16.4 2011.12.14 AdWare.HotBar.dh
VIPRE 11260 2011.12.15 Pinball Corporation. (v)
ViRobot 2011.12.16.4829 2011.12.16 Adware.HotBar.283952
VirusBuster 14.1.119.0 2011.12.16 Adware.Agent!53KYLACnKE0
Additional informationShow all
MD5 : ef8db9304b2197e4485ffde447d901b0
SHA1 : 5fc3a5ceafe07675caf114927c025247740bb8f7

File size : 283952 bytes

…: Pinball Corporation.
copyright….: Copyright (c) 2001-2009 Pinball Corporation. All rights reserved.
product……: ClickPotato ActiveX Control
description..: ClickPotato ActiveX Control
original name: n/a
internal name: n/a
file version.: 10.0.668.0

_____

File name: CLICKPOTATOLITESABHO.DLL.Muestra EliStartPage v24.46
Submission date: 2011-12-16 14:18:18 (UTC)
Current status: queued queued analysing finished

Result: 27/ 43 (62.8%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.12.16.04 2011.12.16 Adware/Win32.HotBar
AntiVir 7.11.19.149 2011.12.16 ADSPY/AdSpy.Gen2
Antiy-AVL 2.0.3.7 2011.12.16 AdWare/Win32.HotBar.gen
Avast 6.0.1289.0 2011.12.16 Win32:Adware-gen
AVG 10.0.0.1190 2011.12.16 Zango
BitDefender 7.2 2011.12.16 Gen:Adware.Heur.ku9@RKTM1Ddi
ByteHero 1.0.0.1 2011.12.07 –
CAT-QuickHeal 12.00 2011.12.16 –
ClamAV 0.97.3.0 2011.12.16 Suspect.W32.AdInstall
Commtouch 5.3.2.6 2011.12.16 –
Comodo 10978 2011.12.16 ApplicUnwnt.Win32.AdWare.HotBar.DE
DrWeb 5.0.2.03300 2011.12.16 –
Emsisoft 5.1.0.11 2011.12.16 Riskware.AdWare.Win32.HotBar!IK
eSafe 7.0.17.0 2011.12.15 Win32.ADSPYAdSpy
eTrust-Vet 37.0.9627 2011.12.16 Win32/Zango.Pinball
F-Prot 4.6.5.141 2011.12.15 –
F-Secure 9.0.16440.0 2011.12.16 Gen:Adware.Heur.ku9@RKTM1Ddi
Fortinet 4.3.388.0 2011.12.16 Adware/PlatriumSA
GData 22.308/22.581 2011.12.16 Gen:Adware.Heur.ku9@RKTM1Ddi
Ikarus T3.1.1.109.0 2011.12.16 not-a-virus:AdWare.Win32.HotBar
Jiangmin 13.0.900 2011.12.15 –
K7AntiVirus 9.119.5696 2011.12.15 –
Kaspersky 9.0.0.837 2011.12.16 –
McAfee 5.400.0.1158 2011.12.16 Adware-HotBar.g
McAfee-GW-Edition 2010.1E 2011.12.16 Adware-HotBar.g
Microsoft 1.7903 2011.12.16 Adware:Win32/ClickPotato
NOD32 6717 2011.12.16 –
Norman 6.07.13 2011.12.16 –
nProtect 2011-12-16.01 2011.12.16 Trojan-Clicker/W32.HotBar.173360
Panda 10.0.3.5 2011.12.16 –
PCTools 8.0.0.5 2011.12.16 –
Prevx 3.0 2011.12.16 –
Rising 23.88.03.02 2011.12.16 Trojan.Win32.Generic.12825032
Sophos 4.72.0 2011.12.16 Hotbar
SUPERAntiSpyware 4.40.0.1006 2011.12.16 Adware.Agent/Gen-Pinball
Symantec 20111.2.0.82 2011.12.16 –
TheHacker 6.7.0.1.359 2011.12.15 –
TrendMicro 9.500.0.1008 2011.12.16 ADW_CLICKPOTATO
TrendMicro-HouseCall 9.500.0.1008 2011.12.16 ADW_CLICKPOTATO
VBA32 3.12.16.4 2011.12.14 AdWare.HotBar.dh
VIPRE 11260 2011.12.15 Pinball Corporation. (v)
ViRobot 2011.12.16.4829 2011.12.16 Adware.HotBar.173360.C
VirusBuster 14.1.119.0 2011.12.16 –
Additional informationShow all
MD5 : 8dddc848e7fc52d5929138b03029da4e
SHA1 : b26a98d2745590867abca228e45b7c585ce844b5

File size : 173360 bytes

publisher….: Pinball Corporation
copyright….: Copyright (c) 2001-2009 Pinball Corporation.
product……: ClickPotato
description..: ClickPotato
original name: n/a
internal name: n/a
file version.: 10.0.668.0

Dicha version del ElistarA 24.47 que lo detecta y elimina ya está disponible en nuestra web desde las 15 h CEST de hoy

saludos

ms, 16-12-2011