Nueva variante de DDoS.Dofoil.A

Una nueva variante de este malware pasa a ser controlada a partir del ELISTARA 24.67

El preanalisis de virustotal ofrece el siguiente informe:
Nombre fichero  23E3C7.exe .

SHA256: 59873e01a74746ace2c924b09545a79e25a869e063f64891a052eac80430c019
SHA1: ba0707a032152d6acc1fd6b8bffe905faf7fdfc6
MD5: 4024ab22f3b16413eb12cbb2a60f09f5
File size: 51.5 KB ( 52736 bytes )
File type: Win32 EXE
Detection ratio: 20 / 34
Analysis date: 2012-01-18 10:06:41 UTC ( 5 minutes ago )

01Antivirus Result Update
AhnLab-V3 Trojan/Win32.FakeAV 20120117
AntiVir DDOS/Dofoil.A.20 20120118
Antiy-AVL Trojan/win32.agent.gen 20120118
Avast Win32:Kryptik-GLK [Trj] 20120118
BitDefender Gen:Variant.Zusy.604 20120118
ByteHero – 20120116
CAT-QuickHeal Trojan.FakeAV.kgpc 20120118
ClamAV – 20120118
Commtouch – 20120118
Comodo UnclassifiedMalware 20120118
Emsisoft Virus.Win32.Cryptor!IK 20120118
eSafe Win32.Kryptik.Yud 20120117
eTrust-Vet – 20120118
F-Prot – 20120118
Fortinet W32/FakeAV.KHGW!tr 20120118
Ikarus Virus.Win32.Cryptor 20120118
Jiangmin – 20120117
K7AntiVirus Trojan 20120117
McAfee Generic PWS.xn 20120118
McAfee-GW-Edition Artemis!4024AB22F3B1 20120118
Microsoft DDoS:Win32/Dofoil.A 20120118
NOD32 a variant of Win32/Kryptik.YWM 20120118
Norman W32/Suspicious_Gen2.UYAMG 20120118
nProtect – 20120118
PCTools – 20120118
Prevx – 20120118
Rising – 20120118
SUPERAntiSpyware – 20120118
TheHacker – 20120117
TrendMicro TROJ_SPNR.11AF12 20120118
TrendMicro-HouseCall TROJ_SPNR.11AF12 20120118
VIPRE Trojan.Win32.Generic!BT 20120118
ViRobot – 20120118
VirusBuster – 20120117

Dicha version 24.67 que lo tecta y elimina ya estaá disponible en nuestra web

saludos

ms, 18-1-2012