Nueva variante del SIREFEF cazada da por la heuristica del ELISIREF

Una nueva variante del temible Sirefef (ZEROACCESS) pasa a ser controlada especificamente a partir de la version 1.14 del ELISIREF de hoy

El preanalisis de dicha muestra ofrece el siguiente informe:
File name: redbook.sys.Muestra EliSirefef v1.13
Submission date: 2011-11-29 14:06:41 (UTC)

Result: 26/ 43 (60.5%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.11.29.01 2011.11.29 Backdoor/Win32.ZAccess
AntiVir 7.11.18.119 2011.11.29 TR/Drop.Sirefef.B.3318
Antiy-AVL 2.0.3.7 2011.11.29 –
Avast 6.0.1289.0 2011.11.29 Win32:Zeroot [Rtk]
AVG 10.0.0.1190 2011.11.29 Hider.OJQ
BitDefender 7.2 2011.11.29 Gen:Variant.Sirefef.14
ByteHero 1.0.0.1 2011.11.29 –
CAT-QuickHeal 12.00 2011.11.29 –
ClamAV 0.97.3.0 2011.11.29 Trojan.Rootkit-3738
Commtouch 5.3.2.6 2011.11.29 –
Comodo 10793 2011.11.29 –
DrWeb 5.0.2.03300 2011.11.29 –
Emsisoft 5.1.0.11 2011.11.29 Trojan.Win32.Hider!IK
eSafe 7.0.17.0 2011.11.28 –
eTrust-Vet 37.0.9593 2011.11.29 –
F-Prot 4.6.5.141 2011.11.28 –
F-Secure 9.0.16440.0 2011.11.29 Gen:Variant.Sirefef.14
Fortinet 4.3.370.0 2011.11.29 W32/ZAccess.G!tr.rkit
GData 22 2011.11.29 Gen:Variant.Sirefef.14
Ikarus T3.1.1.109.0 2011.11.29 Trojan.Win32.Hider
Jiangmin 13.0.900 2011.11.28 Rootkit.ZAccess.ast
K7AntiVirus 9.119.5555 2011.11.28 Riskware
Kaspersky 9.0.0.837 2011.11.29 Rootkit.Win32.ZAccess.g
McAfee 5.400.0.1158 2011.11.29 –
McAfee-GW-Edition 2010.1D 2011.11.29 –
Microsoft 1.7801 2011.11.29 TrojanDropper:Win32/Sirefef.B
NOD32 6668 2011.11.29 a variant of Win32/Rootkit.Kryptik.FH
Norman 6.07.13 2011.11.29 –
nProtect 2011-11-29.01 2011.11.29 Gen:Variant.Sirefef.14
Panda 10.0.3.5 2011.11.28 Generic Trojan
PCTools 8.0.0.5 2011.11.29 Trojan.ADH
Prevx 3.0 2011.11.29 –
Rising 23.86.01.02 2011.11.29 –
Sophos 4.71.0 2011.11.29 Mal/ZAccess-C
SUPERAntiSpyware 4.40.0.1006 2011.11.29 –
Symantec 20111.2.0.82 2011.11.29 Trojan.ADH.2
TheHacker 6.7.0.1.350 2011.11.27 Trojan/Kryptik.fh
TrendMicro 9.500.0.1008 2011.11.29 RTKT_ZACESS.SMAE
TrendMicro-HouseCall 9.500.0.1008 2011.11.29 RTKT_ZACESS.SMAE
VBA32 3.12.16.4 2011.11.28 –
VIPRE 11175 2011.11.29 Trojan.Win32.Generic!BT
ViRobot 2011.11.29.4799 2011.11.29 –
VirusBuster 14.1.89.0 2011.11.28 Rootkit.ZAccess!qmYbGbj1CTg
Additional informationShow all
MD5   : 8ddbc7428cbfe64358c42f6a98a7b84f
SHA1  : e656fd20f327be689a0c38fc342ee294884b88db

File size : 58880 bytes
Dicha version del ELISIREF 1,14 estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 29-11-2011