Otra muestra de driver infectado con el SIREFEF, cazado por la heuristica del ELISTARA

A partir del ELISIREF 1.17 PASAMOS A CONTROLARLO

El preanalisis de virustotal ofrece el siguiente informe:
File name: serial.sys.Muestra EliSirefef v1.15
Submission date: 2011-12-02 11:05:38 (UTC)

Result: 24/ 41 (58.5%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.12.01.02 2011.12.01 Backdoor/Win32.ZAccess
AntiVir 7.11.18.198 2011.12.02 –
Antiy-AVL 2.0.3.7 2011.12.02 Trojan/Win32.ZAccess.gen
Avast 6.0.1289.0 2011.12.02 Win32:Sirefef-F [Drp]
AVG 10.0.0.1190 2011.12.02 –
BitDefender 7.2 2011.12.02 Gen:Variant.Graftor.273
ByteHero 1.0.0.1 2011.11.29 –
CAT-QuickHeal 12.00 2011.12.02 RootKit.ZAccess.A
ClamAV 0.97.3.0 2011.12.02 –
Commtouch 5.3.2.6 2011.12.02 W32/Rootkit.M.gen!Eldorado
Comodo 10810 2011.12.02 TrojWare.Win32.Rootkit.ZAccess.A
Emsisoft 5.1.0.11 2011.12.02 Trojan-Dropper.Win32.Sirefef!IK
eSafe 7.0.17.0 2011.12.01 –
eTrust-Vet 37.0.9599 2011.12.02 Win32/Sirefef.C!generic
F-Prot 4.6.5.141 2011.11.29 W32/Rootkit.M.gen!Eldorado
F-Secure 9.0.16440.0 2011.12.02 Gen:Variant.Graftor.273
Fortinet 4.3.388.0 2011.12.02 W32/ZAccess.C!tr.bdr
GData 22 2011.12.02 Gen:Variant.Graftor.273
Ikarus T3.1.1.109.0 2011.12.02 Trojan-Dropper.Win32.Sirefef
Jiangmin 13.0.900 2011.12.02 –
K7AntiVirus 9.119.5570 2011.11.30 Riskware
Kaspersky 9.0.0.837 2011.12.02 Rootkit.Win32.ZAccess.c
McAfee 5.400.0.1158 2011.12.02 –
McAfee-GW-Edition 2010.1D 2011.12.02 –
Microsoft 1.7903 2011.12.02 TrojanDropper:Win32/Sirefef.B
NOD32 6668 2011.12.01 a variant of Win32/Patched.NBE
Norman 6.07.13 2011.12.02 W32/ZAccess.R
nProtect 2011-12-02.01 2011.12.02 Gen:Variant.Graftor.273
Panda 10.0.3.5 2011.12.01 Trj/CI.A
PCTools 8.0.0.5 2011.12.02 Trojan.Zeroaccess
Prevx 3.0 2011.12.02 –
Rising 23.86.04.02 2011.12.02 –
Sophos 4.71.0 2011.12.02 –
SUPERAntiSpyware 4.40.0.1006 2011.12.02 –
Symantec 20111.2.0.82 2011.12.02 Trojan.Zeroaccess
TheHacker 6.7.0.1.352 2011.12.01 –
TrendMicro 9.500.0.1008 2011.12.02 –
TrendMicro-HouseCall 9.500.0.1008 2011.12.02 –
VIPRE 11190 2011.12.02 Trojan.Win32.Sirefef.cr (v)
ViRobot 2011.12.2.4805 2011.12.02 –
VirusBuster 14.1.95.0 2011.12.01 –
Additional informationShow all
MD5   : 1cade5a15062d15df3b5e1167ec7b821
SHA1  : 83fabb3e792052ce91681054cfe3ba004990b4e7

File size : 65792 bytes
Dicha version del ELISIREF que lo detecta y elimina estara disponible en nuestra web a partir de las 15 h CEST de hoy
saludos

ms, 2/12/2011