Nueva variante de ONLINGAMES, de la serie ARKING

Ya un veterano de los troyanos, el ONLINEGAME, aun sigue sorprendiendo con variantes de su última generacion , la de los ARKING

Pasamos a controlar con ELISTARA 24.29 de hoy, dichas nuevas variantes, cuyos preanalisis con el virusTotal indican lo siguiente:

name: ARKING0.DLL.Muestra EliStartPage v24.21
Submission date: 2011-11-17 09:59:10 (UTC)
Current status: finished
Result: 33 /42 (78.6%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.11.16.00 2011.11.16 Trojan/Win32.Magania
AntiVir 7.11.17.203 2011.11.16 TR/Crypt.ZPACK.Gen
Antiy-AVL 2.0.3.7 2011.11.16 Trojan/Win32.Magania.gen
Avast 6.0.1289.0 2011.11.16 Win32:OnLineGames-GFV [Trj]
AVG 10.0.0.1190 2011.11.16 Win32/Heur
BitDefender 7.2 2011.11.16 Gen:Variant.Taterf.20
ByteHero 1.0.0.1 2011.11.14 –
ClamAV 0.97.3.0 2011.11.16 PUA.Packed.ASPack
Commtouch 5.3.2.6 2011.11.16 W32/Taterf.A!Eldorado
Comodo 10778 2011.11.14 UnclassifiedMalware
DrWeb 5.0.2.03300 2011.11.16 Trojan.PWS.Gamania.32659
Emsisoft 5.1.0.11 2011.11.16 Trojan.Win32.Scar!IK
eSafe 7.0.17.0 2011.11.16 Win32.TRCrypt.ZPACK
eTrust-Vet 37.0.9569 2011.11.16 Win32/Frethog.D!Generic
F-Prot 4.6.5.141 2011.11.16 W32/Taterf.A!Eldorado
F-Secure 9.0.16440.0 2011.11.16 Gen:Variant.Taterf.20
Fortinet 4.3.370.0 2011.11.16 –
GData 22.280/22.509 2011.11.16 Gen:Variant.Taterf.20
Ikarus T3.1.1.109.0 2011.11.16 Trojan.Win32.Scar
Jiangmin 13.0.900 2011.11.16 Trojan/PSW.Magania.bazl
K7AntiVirus 9.119.5474 2011.11.16 Riskware
Kaspersky 9.0.0.837 2011.11.16 Trojan-GameThief.Win32.Magania.fqxx
McAfee 5.400.0.1158 2011.11.16 Generic BackDoor.bfr!m
McAfee-GW-Edition 2010.1D 2011.11.16 Heuristic.LooksLike.Win32.Suspicious.C
Microsoft 1.7801 2011.11.16 PWS:Win32/Frethog.F
NOD32 6636 2011.11.16 Win32/PSW.OnLineGames.QKR
Norman 6.07.13 2011.11.16 –
nProtect 2011-11-16.01 2011.11.16 Gen:Variant.Taterf.20
Panda 10.0.3.5 2011.11.16 Trj/CI.A
PCTools 8.0.0.5 2011.11.16 Trojan.Gen
Prevx 3.0 2011.11.17 –
Rising 23.84.02.02 2011.11.16 –
Sophos 4.71.0 2011.11.16 Troj/Virtum-Gen
SUPERAntiSpyware 4.40.0.1006 2011.11.16 –
Symantec 20111.2.0.82 2011.11.16 Trojan.Gen
TheHacker 6.7.0.1.343 2011.11.16 –
TrendMicro 9.500.0.1008 2011.11.16 WORM_TATERF.AHJ
TrendMicro-HouseCall 9.500.0.1008 2011.11.16 WORM_TATERF.AHJ
VBA32 3.12.16.4 2011.11.15 –
VIPRE 11062 2011.11.16 Trojan.Win32.Generic!BT
ViRobot 2011.11.16.4776 2011.11.16 –
VirusBuster 14.1.66.1 2011.11.16 Trojan.PWS.OnLineGames!JpW5VY9fcRk
Additional informationShow all
MD5   : d672da392f138db587ce5b3a6db4427e
SHA1  : 905f1e0c88b7dee36334e6b8738dcbe66c3ae590

File size : 115798 bytes
______
File name: ARKING.EXE.Muestra EliStartPage v24.21
Submission date: 2011-11-17 10:04:29 (UTC)
Current status: queued queued analysing finished
Result: 33/ 41 (80.5%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.11.16.00 2011.11.16 Dropper/Win32.OnlineGameHack
AntiVir 7.11.17.203 2011.11.16 TR/Crypt.ASPM.Gen2
Antiy-AVL 2.0.3.7 2011.11.16 Trojan/Win32.Vaklik
Avast 6.0.1289.0 2011.11.16 Win32:OnLineGames-GFV [Trj]
AVG 10.0.0.1190 2011.11.16 Win32/NSAnti.J
BitDefender 7.2 2011.11.16 Gen:Variant.Taterf.20
ClamAV 0.97.3.0 2011.11.16 PUA.Packed.ASPack
Commtouch 5.3.2.6 2011.11.16 W32/Taterf.A!Eldorado
Comodo 10778 2011.11.14 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.2.03300 2011.11.16 Trojan.PWS.Wsgame.28475
Emsisoft 5.1.0.11 2011.11.16 Trojan-GameThief.Win32.Magania!IK
eSafe 7.0.17.0 2011.11.16 –
eTrust-Vet 37.0.9569 2011.11.16 Win32/Vaklik.A!generic
F-Prot 4.6.5.141 2011.11.16 W32/Taterf.A!Eldorado
F-Secure 9.0.16440.0 2011.11.16 Gen:Variant.Taterf.20
Fortinet 4.3.370.0 2011.11.16 –
GData 22 2011.11.16 Gen:Variant.Taterf.20
Ikarus T3.1.1.109.0 2011.11.16 Trojan-GameThief.Win32.Magania
Jiangmin 13.0.900 2011.11.16 Trojan/KillAV.ewv
K7AntiVirus 9.119.5474 2011.11.16 Riskware
Kaspersky 9.0.0.837 2011.11.16 Trojan.Win32.Vaklik.mxx
McAfee 5.400.0.1158 2011.11.16 Generic PWS.y!drh
McAfee-GW-Edition 2010.1D 2011.11.16 Generic PWS.y!drh
Microsoft 1.7801 2011.11.16 Worm:Win32/Taterf.D
NOD32 6636 2011.11.16 Win32/PSW.OnLineGames.OUM
Norman 6.07.13 2011.11.16 –
nProtect 2011-11-16.01 2011.11.16 Gen:Variant.Taterf.20
Panda 10.0.3.5 2011.11.16 Generic Trojan
PCTools 8.0.0.5 2011.11.16 Trojan.Gen
Prevx 3.0 2011.11.17 –
Rising 23.84.02.02 2011.11.16 Trojan.Win32.Generic.129D6E70
Sophos 4.71.0 2011.11.16 Mal/Taterf-E
SUPERAntiSpyware 4.40.0.1006 2011.11.16 –
Symantec 20111.2.0.82 2011.11.16 Trojan.Gen
TheHacker 6.7.0.1.343 2011.11.16 –
TrendMicro 9.500.0.1008 2011.11.16 WORM_TATERF.AHJ
TrendMicro-HouseCall 9.500.0.1008 2011.11.16 WORM_TATERF.AHJ
VBA32 3.12.16.4 2011.11.15 –
VIPRE 11062 2011.11.16 Trojan.Win32.Generic!BT
ViRobot 2011.11.16.4776 2011.11.16 –
VirusBuster 14.1.66.1 2011.11.16 Trojan.PWS.OnLineGames!iBaXh6D+dS8
Additional informationShow all
MD5   : cfd0bddd67571e5fc2e7de65c641149b
SHA1  : f67fb040feb2b775bb88466515fbf0e97fcc2ef9

File size : 168960 bytes
______

 Dicha version del ELISTARA 24.29 que los detecta y elimina, estará disponible en nuestra web a pàrtir de las 19 h CEST de hoy

saludos

ms, 17-11-2011