NUEVA VARIANTE DE LA FAMILIA KATUSHA cazada por el ELISTARA e identificada como malware WIDGI

Una nueva variante de esta familia pasa a ser controlada a partir del ELISTARA 24.59 de hoy

El preanalisis de virustotal ofrece este informe:
File name: APPLICATIONUPDATER.EXE.Muestra EliStartPage v24.57
Submission date: 2012-01-04 09:28:46 (UTC)

Result: 39/ 43 (90.7%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2012.01.03.00 2012.01.03 Win-Trojan/Patched.DD
AntiVir 7.11.20.152 2012.01.04 W32/PatchLoad.A
Antiy-AVL 2.0.3.7 2012.01.04 Trojan/Win32.Patched.gen
Avast 6.0.1289.0 2012.01.03 Win32:Patched-WQ [Trj]
AVG 10.0.0.1190 2012.01.03 Win32/Katusha.A
BitDefender 7.2 2012.01.04 Trojan.Patched.HE
ByteHero 1.0.0.1 2011.12.31 Trojan.Win32.Heur.Gen
CAT-QuickHeal 12.00 2012.01.04 W32.Patchload.O
ClamAV 0.97.3.0 2012.01.04 Trojan.Patched-167
Commtouch 5.3.2.6 2012.01.04 W32/Patched.G
Comodo 11191 2012.01.04 TrojWare.Win32.Patched.HN
DrWeb 5.0.2.03300 2012.01.04 Trojan.Starter.1695
Emsisoft 5.1.0.11 2012.01.04 Trojan-Spy.Win32.Zbot!IK
eSafe 7.0.17.0 2012.01.03 –
eTrust-Vet 37.0.9662 2012.01.04 Win32/Patchload.U
F-Prot 4.6.5.141 2012.01.03 W32/Patched.G
F-Secure 9.0.16440.0 2012.01.04 Trojan.Patched.HE
Fortinet 4.3.388.0 2012.01.04 W32/Patched.MF!tr
GData 22 2012.01.04 Trojan.Patched.HE
Ikarus T3.1.1.109.0 2011.12.31 Trojan-Spy.Win32.Zbot
Jiangmin 13.0.900 2012.01.03 TrojanSpy.Zbot.adxr
K7AntiVirus 9.123.5849 2012.01.03 Trojan
Kaspersky 9.0.0.837 2012.01.04 Trojan.Win32.Patched.mf
McAfee 5.400.0.1158 2012.01.04 W32/Katusha
McAfee-GW-Edition 2010.1E 2012.01.03 W32/Katusha
Microsoft 1.7903 2012.01.04 Virus:Win32/Patchload.O
NOD32 6766 2012.01.04 Win32/Patched.HN
Norman 6.07.13 2012.01.03 W32/Patched.BH
nProtect 2012-01-03.01 2012.01.04 Virus/W32.Patched.Gen
Panda 10.0.3.5 2012.01.03 W32/Katusha.BN
PCTools 8.0.0.5 2012.01.04 Trojan.Paccyn
Prevx 3.0 2012.01.04 –
Rising 23.91.02.01 2012.01.04 Win32.Loader.li
Sophos 4.72.0 2012.01.04 W32/Patched-AL
SUPERAntiSpyware 4.40.0.1006 2012.01.04 –
Symantec 20111.2.0.82 2012.01.04 Trojan.Paccyn!inf
TheHacker 6.7.0.1.371 2012.01.03 –
TrendMicro 9.500.0.1008 2012.01.04 PTCH_KATUSHA.W
TrendMicro-HouseCall 9.500.0.1008 2012.01.04 PTCH_KATUSHA.W
VBA32 3.12.16.4 2012.01.03 Trojan-Spy.Zbot.gen
VIPRE 11348 2012.01.04 Virus.Win32.Agent.mpq (v)
ViRobot 2012.1.4.4862 2012.01.04 Win32.Patched.BE
VirusBuster 14.1.148.0 2012.01.03 Win32.Katusha.Gen

Additional informationShow all
MD5   : f7d29338737b6a76c1d30a731234191f
SHA1  : cc6e207d137d6efdcf911bb87cd033d1f23f7efd

File size : 748440 bytes

publisher….: Spigot, Inc.
copyright….: Copyright (c) 2005-2011 Spigot, Inc.
product……: Application Updater
description..: Application Updater
original name: ApplicationUpdater.exe
internal name: ApplicationUpdater.exe
file version.: 4, 9, 0, 5
Dicha version del ELISTARA 24.59 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 4-1-2012