Nuevas variantes de PROXY-EXI cazadas por la heuristica de los ELISTARA

Con la nueva version de hoy del ELISTARA 24.47, pasamos a controlar nuevas variantes de PROXY-EXI

Los prteanalisis con virustotal nos ofrecen los siguientes informes:

File name: 5C5.EXE.Muestra EliStartPage v24.38
Submission date: 2011-12-16 08:46:01 (UTC)
Current status: queued queued analysing finished
Result: 19/ 43 (44.2%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.12.15.00 2011.12.15 Backdoor/Win32.Gbot
AntiVir 7.11.19.132 2011.12.15 BDS/Cycbot.grmlb
Antiy-AVL 2.0.3.7 2011.12.16 –
Avast 6.0.1289.0 2011.12.16 Win32:Cybota [Trj]
AVG 10.0.0.1190 2011.12.15 Generic26.XMR
BitDefender 7.2 2011.12.16 Gen:Variant.Kazy.48122
ByteHero 1.0.0.1 2011.12.07 Trojan.Win32.Heur.Gen
CAT-QuickHeal 12.00 2011.12.16 –
ClamAV 0.97.3.0 2011.12.15 –
Commtouch 5.3.2.6 2011.12.16 –
Comodo 10975 2011.12.16 TrojWare.Win32.Kryptik.XEN
DrWeb 5.0.2.03300 2011.12.16 BackDoor.Gbot.1851
Emsisoft 5.1.0.11 2011.12.16 –
eSafe 7.0.17.0 2011.12.15 –
eTrust-Vet 37.0.9627 2011.12.16 Win32/Cycbot.KC!generic
F-Prot 4.6.5.141 2011.12.15 –
F-Secure 9.0.16440.0 2011.12.16 Gen:Variant.Kazy.48122
Fortinet 4.3.388.0 2011.12.16 –
GData 22 2011.12.16 Gen:Variant.Kazy.48122
Ikarus T3.1.1.109.0 2011.12.16 –
Jiangmin 13.0.900 2011.12.15 –
K7AntiVirus 9.119.5696 2011.12.15 Backdoor
Kaspersky 9.0.0.837 2011.12.16 HEUR:Trojan.Win32.Generic
McAfee 5.400.0.1158 2011.12.16 –
McAfee-GW-Edition 2010.1E 2011.12.16 –
Microsoft 1.7903 2011.12.16 –
NOD32 6715 2011.12.16 a variant of Win32/Kryptik.XCM
Norman 6.07.13 2011.12.15 W32/Cycbot.EW
nProtect 2011-12-16.01 2011.12.16 –
Panda 10.0.3.5 2011.12.15 Generic Malware
PCTools 8.0.0.5 2011.12.16 –
Prevx 3.0 2011.12.16 –
Rising 23.88.03.02 2011.12.16 –
Sophos 4.72.0 2011.12.16 Troj/CycBot-R
SUPERAntiSpyware 4.40.0.1006 2011.12.16 Trojan.Agent/Gen-Kazy[NF]
Symantec 20111.2.0.82 2011.12.16 –
TheHacker 6.7.0.1.359 2011.12.15 –
TrendMicro 9.500.0.1008 2011.12.16 –
TrendMicro-HouseCall 9.500.0.1008 2011.12.16 –
VBA32 3.12.16.4 2011.12.14 –
VIPRE 11260 2011.12.15 Trojan.Win32.FakeAV.IS (v)
ViRobot 2011.12.16.4828 2011.12.16 –
VirusBuster 14.1.118.0 2011.12.15 –
Additional informationShow all
MD5   : 56ccf6c437a3a11340d24bf6d47ba531
SHA1  : 21824bf3a6e55da723b1c6880be444e6aa877a45

File size : 291328 bytes

_________
File name: 5C5.EXE.Muestra EliStartPage v24.45
Submission date: 2011-12-16 08:57:49 (UTC)
Current status: queued queued analysing finished
Result: 21/ 43 (48.8%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.12.15.00 2011.12.15 –
AntiVir 7.11.19.132 2011.12.15 TR/Cycbot.1.49
Antiy-AVL 2.0.3.7 2011.12.16 Backdoor/Win32.Gbot.gen
Avast 6.0.1289.0 2011.12.16 Win32:Cybota [Trj]
AVG 10.0.0.1190 2011.12.15 Win32/Cryptor
BitDefender 7.2 2011.12.16 Gen:Variant.Cycbot.1
ByteHero 1.0.0.1 2011.12.07 –
CAT-QuickHeal 12.00 2011.12.16 –
ClamAV 0.97.3.0 2011.12.15 –
Commtouch 5.3.2.6 2011.12.16 –
Comodo 10975 2011.12.16 TrojWare.Win32.Kryptik.XEN
DrWeb 5.0.2.03300 2011.12.16 BackDoor.Gbot.1589
Emsisoft 5.1.0.11 2011.12.16 Virus.Win32.Cryptor!IK
eSafe 7.0.17.0 2011.12.15 –
eTrust-Vet 37.0.9627 2011.12.16 Win32/Cycbot.KD!generic
F-Prot 4.6.5.141 2011.12.15 –
F-Secure 9.0.16440.0 2011.12.16 Gen:Variant.Cycbot.1
Fortinet 4.3.388.0 2011.12.16 –
GData 22 2011.12.16 Gen:Variant.Cycbot.1
Ikarus T3.1.1.109.0 2011.12.16 Virus.Win32.Cryptor
Jiangmin 13.0.900 2011.12.15 –
K7AntiVirus 9.119.5696 2011.12.15 Backdoor
Kaspersky 9.0.0.837 2011.12.16 Backdoor.Win32.Gbot.qvo
McAfee 5.400.0.1158 2011.12.16 BackDoor-EXI.gen.aa
McAfee-GW-Edition 2010.1E 2011.12.16 –
Microsoft 1.7903 2011.12.16 –
NOD32 6716 2011.12.16 Win32/Cycbot.AK
Norman 6.07.13 2011.12.15 –
nProtect 2011-12-16.01 2011.12.16 –
Panda 10.0.3.5 2011.12.15 Trj/CI.A
PCTools 8.0.0.5 2011.12.16 –
Prevx 3.0 2011.12.16 –
Rising 23.88.03.02 2011.12.16 –
Sophos 4.72.0 2011.12.16 Troj/CycBot-R
SUPERAntiSpyware 4.40.0.1006 2011.12.16 Trojan.Agent/Gen-Kazy[NF]
Symantec 20111.2.0.82 2011.12.16 –
TheHacker 6.7.0.1.359 2011.12.15 –
TrendMicro 9.500.0.1008 2011.12.16 –
TrendMicro-HouseCall 9.500.0.1008 2011.12.16 TROJ_GEN.RC1C7LG
VBA32 3.12.16.4 2011.12.14 –
VIPRE 11260 2011.12.15 Trojan.Win32.Generic!BT
ViRobot 2011.12.16.4828 2011.12.16 –
VirusBuster 14.1.118.0 2011.12.15 –
Additional informationShow all
MD5   : 373f196aa469abc7c95243e57ff1685b
SHA1  : 1651bf319d92cbdab0997c53dc49fb6054c9c20c

File size : 292352 bytes

Dicha version de ELISTARA 24.47 que los detecta y elimina estará disponible en nuestra web a partir de las 15 h CEST de hoy

saludos

ms, 16-12-2011