Nueva variante de PROXY-EXI

Una nueva variante de uno de los (tres) componentes de este malware, pasamos a controlarla a partir del ELISTARA 24.38 de hoy

El preanalisis del virustotal nos ofrece este informe:

File name: 5C5.EXE.Muestra EliStartPage v24.37
Submission date: 2011-11-30 09:20:50 (UTC)

Result: 12/ 43 (27.9%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.11.29.01 2011.11.29 –
AntiVir 7.11.18.130 2011.11.30 TR/Crypt.XPACK.Gen
Antiy-AVL 2.0.3.7 2011.11.30 –
Avast 6.0.1289.0 2011.11.30 Win32:Rootkit-gen [Rtk]
AVG 10.0.0.1190 2011.11.29 –
BitDefender 7.2 2011.11.30 –
ByteHero 1.0.0.1 2011.11.29 –
CAT-QuickHeal 12.00 2011.11.30 –
ClamAV 0.97.3.0 2011.11.30 –
Commtouch 5.3.2.6 2011.11.30 –
Comodo 10794 2011.11.30 –
DrWeb 5.0.2.03300 2011.11.30 BackDoor.Gbot.1851
Emsisoft 5.1.0.11 2011.11.30 Backdoor.Win32.Cycbot!IK
eSafe 7.0.17.0 2011.11.28 –
eTrust-Vet 37.0.9595 2011.11.30 –
F-Prot 4.6.5.141 2011.11.29 –
F-Secure 9.0.16440.0 2011.11.30 –
Fortinet 4.3.370.0 2011.11.30 –
GData 22 2011.11.30 –
Ikarus T3.1.1.109.0 2011.11.30 Backdoor.Win32.Cycbot
Jiangmin 13.0.900 2011.11.28 –
K7AntiVirus 9.119.5563 2011.11.29 Backdoor
Kaspersky 9.0.0.837 2011.11.30 HEUR:Trojan.Win32.Generic
McAfee 5.400.0.1158 2011.11.30 BackDoor-FDB
McAfee-GW-Edition 2010.1D 2011.11.30 –
Microsoft 1.7801 2011.11.30 Backdoor:Win32/Cycbot.G
NOD32 6668 2011.11.29 a variant of Win32/Kryptik.WGR
Norman 6.07.13 2011.11.29 –
nProtect 2011-11-30.01 2011.11.30 –
Panda 10.0.3.5 2011.11.29 Suspicious file
PCTools 8.0.0.5 2011.11.30 –
Prevx 3.0 2011.11.30 –
Rising 23.86.02.02 2011.11.30 –
Sophos 4.71.0 2011.11.30 –
SUPERAntiSpyware 4.40.0.1006 2011.11.30 –
Symantec 20111.2.0.82 2011.11.30 –
TheHacker 6.7.0.1.351 2011.11.30 –
TrendMicro 9.500.0.1008 2011.11.30 –
TrendMicro-HouseCall 9.500.0.1008 2011.11.30 –
VBA32 3.12.16.4 2011.11.29 –
VIPRE 11179 2011.11.30 Trojan.Win32.Generic!BT
ViRobot 2011.11.30.4800 2011.11.30 –
VirusBuster 14.1.91.0 2011.11.29 –
Additional informationShow all
MD5   : a5524c4c59dc671a106daf6a7a45901b
SHA1  : e88cadb6d9f2b6b29f26eeeeeae2256eb30691b3
SHA256: 1f3f99cfd859548b4936fbe2fb631f0f83c35d48be30a235612d7d7f5b3030bc
ssdeep: 6144:lgRqbGp6NH+qcEDlCC/R4eilAZ88K8snV7mv+Juo:l+qbGWeGlD/yeLZV4A2Ju
File size : 285184 bytes

Win32 Executable Generic (38.3%)

Dicha version del ELISTARA que lo detecta y elimina, estará disponible en nuestra web a partir de las 19h CEST de hoy

saludos

ms, 30-11-2011