Nueva variante de Spy Plimrost cazado por la heuristica del ELISTARA

Una muestra sospechosa pedida por el ELISTARA ha sido identificada como SPY PLIMROST por el preanalisis del VirusTotal.

Con la version de hoy del ELISTARA 22.42 lo pasamos a controlar específicamente

File name: NTUSER32.EXE.Muestra EliStartPage v22.40
Submission date: 2011-01-19 08:30:40 (UTC)
Current status: queued queued analysing finished
Result: 18/ 43 (41.9%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.18.00 2011.01.17 Win-Trojan/Injector.977920.D
AntiVir 7.11.1.174 2011.01.18 TR/Agent2.dbzm
Antiy-AVL 2.0.3.7 2011.01.18 Trojan/Win32.Agent2.gen
Avast 4.8.1351.0 2011.01.18 –
Avast5 5.0.677.0 2011.01.18 –
AVG 10.0.0.1190 2011.01.19 –
BitDefender 7.2 2011.01.19 Trojan.Generic.KDV.112431
CAT-QuickHeal 11.00 2011.01.19 –
ClamAV 0.96.4.0 2011.01.19 –
Commtouch 5.2.11.5 2011.01.19 –
Comodo 7440 2011.01.19 –
DrWeb 5.0.2.03300 2011.01.19 Trojan.Inject.20010
Emsisoft 5.1.0.1 2011.01.19 Trojan.Win32.Agent2!IK
eSafe 7.0.17.0 2011.01.18 –
eTrust-Vet 36.1.8108 2011.01.19 –
F-Prot 4.6.2.117 2011.01.18 –
F-Secure 9.0.16160.0 2011.01.19 Trojan.Generic.KDV.112431
Fortinet 4.2.254.0 2011.01.16 –
GData 21 2011.01.19 Trojan.Generic.KDV.112431
Ikarus T3.1.1.97.0 2011.01.19 Trojan.Win32.Agent2
Jiangmin 13.0.900 2011.01.19 Trojan/Agent.eqqt
K7AntiVirus 9.77.3570 2011.01.18 –
Kaspersky 7.0.0.125 2011.01.19 Trojan.Win32.Agent2.dbzm
McAfee 5.400.0.1158 2011.01.19 Artemis!6574100CF10F
McAfee-GW-Edition 2010.1C 2011.01.18 Artemis!6574100CF10F
Microsoft 1.6402 2011.01.19 TrojanSpy:Win32/Plimrost.A
NOD32 5798 2011.01.18 –
Norman 6.06.12 2011.01.18 –
nProtect 2011-01-18.01 2011.01.18 Trojan/W32.Agent2.977920
Panda 10.0.2.7 2011.01.18 Trj/CI.A
PCTools 7.0.3.5 2011.01.19 Trojan.Gen
Prevx 3.0 2011.01.19 –
Rising 22.83.02.00 2011.01.19 –
Sophos 4.61.0 2011.01.19 –
SUPERAntiSpyware 4.40.0.1006 2011.01.19 –
Symantec 20101.3.0.103 2011.01.19 Trojan.Gen
TheHacker 6.7.0.1.116 2011.01.18 –
TrendMicro 9.120.0.1004 2011.01.19 –
TrendMicro-HouseCall 9.120.0.1004 2011.01.19 –
VBA32 3.12.14.2 2011.01.18 –
VIPRE 8122 2011.01.19 –
ViRobot 2011.1.19.4262 2011.01.19 –
VirusBuster 13.6.152.1 2011.01.18 –
Additional informationShow all
MD5   : 6574100cf10f1898da69ef51a12c6858
SHA1  : f40cfce98746ddad846be858a17be3a4e15c7f55

File size : 977920 bytes

publisher….: Dale Nurden
copyright….: Copyright (c)1998-2000 Dale Nurden, All Rights Reserved
product……: TClockEx
description..: TClockEx loader
original name: TCLOCKEX.EXE
internal name: TCLOCKEX

A partir de las 19 horas de hoy, dicha version del ELISTARA 22.42 que lo controla y elimina, estará disponible en nuestra web.

saludos

ms, 19-1-2011