Nueva variante de malware CLEAMAN cazado por el ELISTARA

Una nueva muestra pedida por el ELISTARA pasa a ser controlada especificamente a partir del ELISTARA 24.83 de hoy

El preanalisis de virustotal ofrece este informe:

4c004a6c2d06e3d5690baa31e11b0fbbceac98870ee53b91d41c289d43742785
SHA1: 586e88f965c241737548e4431947a4edf678f7c9
MD5: 6b164567e5361f2ff798c68c23e80490
Tamaño: 80.0 KB ( 81896 bytes )
Nombre: ISCSIRESULT.EXE.Muestra EliStartPage v24.82
Tipo: Win32 EXE
Detecciones: 10 / 43
Fecha de análisis: 2012-02-08 12:23:54 UTC ( hace 4 minutos )

01Antivirus Resultado Actualización
AhnLab-V3 – 20120207
AntiVir – 20120208
Antiy-AVL – 20120203
Avast – 20120207
AVG Suspicion: unknown virus 20120208
BitDefender – 20120208
ByteHero – 20120207
CAT-QuickHeal – 20120208
ClamAV – 20120208
Commtouch – 20120208
Comodo – 20120208
DrWeb Trojan.DownLoad2.49842 20120208
Emsisoft Trojan.Win32.Cleaman!IK 20120208
eSafe – 20120207
eTrust-Vet – 20120207
F-Prot – 20120201
F-Secure – 20120208
Fortinet W32/FakeAlert.HD!tr 20120208
GData – 20120208
Ikarus Trojan.Win32.Cleaman 20120208
Jiangmin – 20120207
K7AntiVirus Trojan 20120207
Kaspersky – 20120208
McAfee Cleaman.d 20120208
McAfee-GW-Edition – 20120208
Microsoft TrojanDownloader:Win32/Cred.B 20120208
NOD32 a variant of Win32/Kryptik.AAHN 20120208
Norman – 20120207
nProtect – 20120208
Panda Suspicious file 20120207
PCTools – 20120207
Prevx – 20120208
Rising – 20120208
Sophos – 20120208
SUPERAntiSpyware – 20120206
Symantec – 20120208
TheHacker – 20120208
TrendMicro – 20120208
TrendMicro-HouseCall – 20120208
VBA32 – 20120207
VIPRE – 20120208
ViRobot – 20120208
VirusBuster – 20120207
24.83

SHA256: 4c004a6c2d06e3d5690baa31e11b0fbbceac98870ee53b91d41c289d43742785
SHA1: 586e88f965c241737548e4431947a4edf678f7c9
MD5: 6b164567e5361f2ff798c68c23e80490
Tamaño: 80.0 KB ( 81896 bytes )
Nombre: ISCSIRESULT.EXE.Muestra EliStartPage v24.82
Tipo: Win32 EXE
Detecciones: 10 / 43
Fecha de análisis: 2012-02-08 12:23:54 UTC ( hace 4 minutos )

01Antivirus Resultado Actualización
AhnLab-V3 – 20120207
AntiVir – 20120208
Antiy-AVL – 20120203
Avast – 20120207
AVG Suspicion: unknown virus 20120208
BitDefender – 20120208
ByteHero – 20120207
CAT-QuickHeal – 20120208
ClamAV – 20120208
Commtouch – 20120208
Comodo – 20120208
DrWeb Trojan.DownLoad2.49842 20120208
Emsisoft Trojan.Win32.Cleaman!IK 20120208
eSafe – 20120207
eTrust-Vet – 20120207
F-Prot – 20120201
F-Secure – 20120208
Fortinet W32/FakeAlert.HD!tr 20120208
GData – 20120208
Ikarus Trojan.Win32.Cleaman 20120208
Jiangmin – 20120207
K7AntiVirus Trojan 20120207
Kaspersky – 20120208
McAfee Cleaman.d 20120208
McAfee-GW-Edition – 20120208
Microsoft TrojanDownloader:Win32/Cred.B 20120208
NOD32 a variant of Win32/Kryptik.AAHN 20120208
Norman – 20120207
nProtect – 20120208
Panda Suspicious file 20120207
PCTools – 20120207
Prevx – 20120208
Rising – 20120208
Sophos – 20120208
SUPERAntiSpyware – 20120206
Symantec – 20120208
TheHacker – 20120208
TrendMicro – 20120208
TrendMicro-HouseCall – 20120208
VBA32 – 20120207
VIPRE – 20120208
ViRobot – 20120208
VirusBuster – 20120207

Dicha version del ELISTARA 24.83 que lo detecta y elimina, estara disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 8-2-2012