Nueva variante de FAKE AV XP SECURITY cazado por el ELISTARA

La heuristica del ELISTARA ha pedido muestra de este malware, que pasamos a conytrolar especificamente a partir del ELISTARA 24.66 de hoy

El preanalisis de virustotal nos ofrece este informe:

Nombre Fichero : EUN.EXE.Muestra EliStartPage v24.62
SHA256: 4ae2811f69ab1aeabf5b0c96caa2655b827182c95c1dd007e72bfe295f70f7b6
SHA1: 3cba734bdefb3c94f38e9a6156a9ef5fd57ce0e8
MD5: 88a0ed558e60c195d5720c529e64b6a0
File size: 267.0 KB ( 273408 bytes )
File type: Win32 EXE
Detection ratio: 25 / 43
Analysis date: 2012-01-16 10:23:49 UTC ( 0 minutes ago )

01
Antivirus Result Version Update
AhnLab-V3 Trojan/Win32.FakeAV 2012.01.15.00 20120115
AntiVir TR/Fake.Rean.7443 7.11.21.34 20120116
Antiy-AVL – 2.0.3.7 20120116
Avast Win32:MalOb-HY [Cryp] 6.0.1289.0 20120116
AVG Crypt.AOEQ 10.0.0.1190 20120115
BitDefender Gen:Variant.Zusy.592 7.2 20120116
ByteHero – 1.0.0.1 20120111
CAT-QuickHeal – 12.00 20120116
ClamAV – 0.97.3.0 20120116
Commtouch – 5.3.2.6 20120116
Comodo TrojWare.Win32.Trojan.Agent.Gen 11281 20120116
DrWeb Trojan.Fakealert.20509 5.0.2.03300 20120116
Emsisoft Trojan.Win32.FakeAV!IK 5.1.0.11 20120116
eSafe – 7.0.17.0 20120115
eTrust-Vet Win32/FakeAV.BM!generic 37.0.9683 20120116
F-Prot – 4.6.5.141 20120116
F-Secure Rogue:W32/FakeAv.IL 9.0.16440.0 20120116
Fortinet – 4.3.388.0 20120115
GData Gen:Variant.Zusy.592 22 20120116
Ikarus Trojan.Win32.FakeAV T3.1.1.113.0 20120116
Jiangmin – 13.0.900 20120115
K7AntiVirus – 9.126.5936 20120113
Kaspersky Trojan.Win32.FakeAV.kiip 9.0.0.837 20120116
McAfee FakeAlert-Rena.p 5.400.0.1158 20120116
McAfee-GW-Edition FakeAlert-Rena.p 2010.1E 20120115
Microsoft Rogue:Win32/FakeRean 1.7903 20120116
NOD32 a variant of Win32/Kryptik.YUY 6798 20120116
Norman – 6.07.13 20120115
nProtect – 2012-01-16.01 20120116
Panda Trj/CI.A 10.0.3.5 20120115
PCTools FakeCloudAV2012 8.0.0.5 20120116
Prevx Medium Risk Malware 3.0 20120116
Rising – 23.93.00.02 20120116
Sophos Troj/FakeAV-FAB 4.73.0 20120116
SUPERAntiSpyware – 4.40.0.1006 20120114
Symantec FakeCloudAV2012 20111.2.0.82 20120116
TheHacker – 6.7.0.1.379 20120115
TrendMicro TROJ_GEN.RC1C7AD 9.500.0.1008 20120116
TrendMicro-HouseCall TROJ_SPNR.11AF12 9.500.0.1008 20120116
VBA32 – 3.12.16.4 20120116
VIPRE Trojan.Win32.Generic.pak!cobra 11404 20120116
ViRobot – 2012.1.16.4881 20120116
VirusBuster – 14.1.168.0 20120115
Dicha version del ELISTARA 24.66 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 16-1-2012