Nueva variante de MALWARE WIDGI detectada heuristicamente por el ELISTARA

Otra caza heuristica ha sido identificada como MALWARE WIDGI y pasa a ser controlada

especificamente a partir del ELISTARA 24.33 de hoy
El preanalisis con virustotal ofrece el siguiente informe:
File name: APPLICATIONUPDATER.EXE.Muestra EliStartPage v24.32
Submission date: 2011-11-23 07:48:24 (UTC)
Current status: finished
Result: 40 /43 (93.0%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.11.22.00 2011.11.22 Win-Trojan/Patched.DD
AntiVir 7.11.18.14 2011.11.23 W32/PatchLoad.A
Antiy-AVL 2.0.3.7 2011.11.23 Trojan/Win32.Patched.gen
Avast 6.0.1289.0 2011.11.22 Win32:Patched-WQ [Trj]
AVG 10.0.0.1190 2011.11.22 Win32/Katusha.A
BitDefender 7.2 2011.11.23 Trojan.Patched.HE
ByteHero 1.0.0.1 2011.11.14 Trojan.Win32.Heur.Gen
CAT-QuickHeal 12.00 2011.11.22 W32.Patchload.O
ClamAV 0.97.3.0 2011.11.23 Trojan.Patched-167
Commtouch 5.3.2.6 2011.11.23 W32/Patched.G
Comodo 10783 2011.11.23 TrojWare.Win32.Patched.HN
DrWeb 5.0.2.03300 2011.11.23 Trojan.Starter.1695
Emsisoft 5.1.0.11 2011.11.23 Trojan-Spy.Win32.Zbot!IK
eSafe 7.0.17.0 2011.11.22 Win32.Trojan
eTrust-Vet 37.0.9582 2011.11.22 Win32/Patchload.U
F-Prot 4.6.5.141 2011.11.23 W32/Patched.G
F-Secure 9.0.16440.0 2011.11.23 Trojan.Patched.HE
Fortinet 4.3.370.0 2011.11.23 W32/Patched.MF!tr
GData 22.285/22.523 2011.11.23 Trojan.Patched.HE
Ikarus T3.1.1.109.0 2011.11.23 Trojan-Spy.Win32.Zbot
Jiangmin 13.0.900 2011.11.22 TrojanSpy.Zbot.adxr
K7AntiVirus 9.119.5516 2011.11.22 Trojan
Kaspersky 9.0.0.837 2011.11.23 Trojan.Win32.Patched.mf
McAfee 5.400.0.1158 2011.11.23 W32/Katusha
McAfee-GW-Edition 2010.1D 2011.11.23 W32/Katusha
Microsoft 1.7801 2011.11.23 Virus:Win32/Patchload.O
NOD32 6652 2011.11.23 Win32/Patched.HN
Norman 6.07.13 2011.11.22 W32/Patched.BH
nProtect 2011-11-23.01 2011.11.23 Virus/W32.Patched.Gen
Panda 10.0.3.5 2011.11.22 W32/Katusha.BN
PCTools 8.0.0.5 2011.11.23 Trojan.Paccyn
Prevx 3.0 2011.11.23 –
Rising 23.85.02.01 2011.11.23 Win32.Loader.li
Sophos 4.71.0 2011.11.23 W32/Patched-AL
SUPERAntiSpyware 4.40.0.1006 2011.11.23 –
Symantec 20111.2.0.82 2011.11.23 Trojan.Paccyn!inf
TheHacker 6.7.0.1.347 2011.11.23 –
TrendMicro 9.500.0.1008 2011.11.23 PTCH_KATUSHA.W
TrendMicro-HouseCall 9.500.0.1008 2011.11.23 PTCH_KATUSHA.W
VBA32 3.12.16.4 2011.11.22 Trojan-Spy.Zbot.gen
VIPRE 11123 2011.11.23 Virus.Win32.Agent.mpq (v)
ViRobot 2011.11.23.4788 2011.11.23 Win32.Patched.BE
VirusBuster 14.1.79.0 2011.11.22 Win32.Katusha.Gen
Additional informationShow all
MD5   : f978615431a8bf661a5ea98383b86e15
SHA1  : cb9c6a5089f0d1a1525894f932a6e20080acb08e

File size : 745880 bytes

publisher….: Spigot, Inc.
copyright….: Copyright (c) 2005-2011 Spigot, Inc.
product……: Application Updater
description..: Application Updater
original name: ApplicationUpdater.exe
internal name: ApplicationUpdater.exe
file version.: 4, 7, 0, 9

Dicha versión del ELISTARA 24.33 que lo detecta y elimina, estará disponible en nuestra web a

partir de las 19 h CEST de hoy

saludos

ms, 23-11-2011