Dropper de SALITY

A partir del ELISTARA 24.61 de hoy pasamos a controlar este DROPPER infector de SALITY, eliminandolo si lo detectamos, si bien la limpieza de los ficheros que hubiera infectado su ejecucion, deberá limpiarse con el antivirus correspondiente

El preanalisis de virustotal ofrece este informe:

File name: caqos.exe
Submission date: 2012-01-09 15:34:45 (UTC)

Result: 23/ 43 (53.5%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2012.01.09.00 2012.01.09 Dropper/Win32.SalityLnk
AntiVir 7.11.20.200 2012.01.09 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2012.01.09 –
Avast 6.0.1289.0 2012.01.09 Win32:StubOfSality [Trj]
AVG 10.0.0.1190 2012.01.09 Win32/Sality.dropper
BitDefender 7.2 2012.01.09 –
ByteHero 1.0.0.1 2011.12.31 Virus.Win32.Heur.d
CAT-QuickHeal 12.00 2012.01.09 Trojan.Hello.A1
ClamAV 0.97.3.0 2012.01.09 –
Commtouch 5.3.2.6 2012.01.09 W32/Sality.C.gen!Eldorado
Comodo 11223 2012.01.09 Win32.Kashu.RA
DrWeb 5.0.2.03300 2012.01.09 Win32.Sector.23
Emsisoft 5.1.0.11 2012.01.09 –
eSafe 7.0.17.0 2012.01.08 –
eTrust-Vet 37.0.9671 2012.01.09 Win32/Sality.B!corrupt
F-Prot 4.6.5.141 2012.01.09 W32/Sality.C.gen!Eldorado
F-Secure 9.0.16440.0 2012.01.09 –
Fortinet 4.3.388.0 2012.01.09 W32/LPECrypt.A!tr
GData 22 2012.01.09 Win32:StubOfSality
Ikarus T3.1.1.109.0 2012.01.09 –
Jiangmin 13.0.900 2012.01.08 Trojan/Inject.lyc
K7AntiVirus 9.123.5881 2012.01.06 Trojan
Kaspersky 9.0.0.837 2012.01.09 –
McAfee 5.400.0.1158 2012.01.09 Yrf
McAfee-GW-Edition 2010.1E 2012.01.09 Yrf
Microsoft 1.7903 2012.01.09 –
NOD32 6779 2012.01.09 –
Norman 6.07.13 2012.01.09 Sality.dam
nProtect 2012-01-09.01 2012.01.09 –
Panda 10.0.3.5 2012.01.09 W32/Sality.AK.drp
PCTools 8.0.0.5 2012.01.09 –
Prevx 3.0 2012.01.09 –
Rising 23.92.00.02 2012.01.09 Trojan.Win32.Fednu.gt
Sophos 4.73.0 2012.01.09 –
SUPERAntiSpyware 4.40.0.1006 2012.01.07 Trojan.Agent/Gen-Frauder[LordPE]
Symantec 20111.2.0.82 2012.01.09 –
TheHacker 6.7.0.1.373 2012.01.08 –
TrendMicro 9.500.0.1008 2012.01.09 –
TrendMicro-HouseCall 9.500.0.1008 2012.01.09 –
VBA32 3.12.16.4 2012.01.09 –
VIPRE 11374 2012.01.09 TrojanDropper.Win32.Saldrop.a (v) (not malicious)
ViRobot 2012.1.9.4871 2012.01.09 Trojan.Win32.Sality.103140
VirusBuster 14.1.157.0 2012.01.08 –

Additional informationShow all
MD5   : ca4153a3e9253b96b2a00b0a838a6e6d
SHA1  : abfb1ebbd9c11ddd3dd54c5380c8a0e66c196554

File size : 29412 bytes
Dicha version del ELISTARA 24.61 estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 9-1-2012