Nueva variante de PROXY EXI cazado por la heuristica del ELISTARA

Otra muestra pedida por el ELISTARA pasa a ser controlada especificamente a partir del ELISTARA 24.59 de hoy

El preanalisis de virustotal ofrece este informe:

File name: 421.EXE.Muestra EliStartPage v24.58
l preanalisis de Submission date: 2012-01-04 15:26:08 (UTC)
Current status: finished
Result: 22 /40 (55.0%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2012.01.03.00 2012.01.03 Trojan/Win32.Jorik
AntiVir 7.11.20.158 2012.01.04 BDS/Cycbot.G.219
Antiy-AVL 2.0.3.7 2012.01.04 –
Avast 6.0.1289.0 2012.01.04 Win32:Cybota [Trj]
AVG 10.0.0.1190 2012.01.04 Win32/Cryptor
BitDefender 7.2 2012.01.04 Gen:Variant.Kazy.51003
CAT-QuickHeal 12.00 2012.01.04 (Suspicious) – DNAScan
ClamAV 0.97.3.0 2012.01.04 –
Commtouch 5.3.2.6 2012.01.04 –
Comodo 11194 2012.01.04 TrojWare.Win32.Kryptik.YAK
DrWeb 5.0.2.03300 2012.01.04 BackDoor.Gbot.2028
Emsisoft 5.1.0.11 2012.01.04 –
eTrust-Vet 37.0.9663 2012.01.04 Win32/Cycbot.G!generic
F-Prot 4.6.5.141 2012.01.03 –
F-Secure 9.0.16440.0 2012.01.04 Gen:Variant.Kazy.51003
Fortinet 4.3.388.0 2012.01.04 –
GData 22.331/22.624 2012.01.04 Gen:Variant.Kazy.51003
Ikarus T3.1.1.109.0 2011.12.31 –
Jiangmin 13.0.900 2012.01.04 –
K7AntiVirus 9.123.5849 2012.01.03 Backdoor
Kaspersky 9.0.0.837 2012.01.04 HEUR:Trojan.Win32.Generic
McAfee 5.400.0.1158 2012.01.04 BackDoor-EXI.gen.aa
McAfee-GW-Edition 2010.1E 2012.01.04 BackDoor-EXI.gen.aa
Microsoft 1.7903 2012.01.04 Backdoor:Win32/Cycbot.G
NOD32 6767 2012.01.04 a variant of Win32/Kryptik.YFC
Norman 6.07.13 2012.01.03 W32/Cycbot.EZ
nProtect 2012-01-04.01 2012.01.04 –
Panda 10.0.3.5 2012.01.04 Suspicious file
PCTools 8.0.0.5 2012.01.04 –
Prevx 3.0 2012.01.04 –
Rising 23.91.02.01 2012.01.04 –
Sophos 4.72.0 2012.01.04 Sus/UnkPack-C
Symantec 20111.2.0.82 2012.01.04 –
TheHacker 6.7.0.1.371 2012.01.03 –
TrendMicro 9.500.0.1008 2012.01.04 –
TrendMicro-HouseCall 9.500.0.1008 2012.01.04 –
VBA32 3.12.16.4 2012.01.04 –
VIPRE 11348 2012.01.04 Trojan.Win32.Generic!BT
ViRobot 2012.1.4.4863 2012.01.04 –
VirusBuster 14.1.149.0 2012.01.04 Backdoor.Cycbot!WnLcKaFz5n4

Additional informationShow all
MD5   : 4561ac6e52ad42b1ac11974fc9686923
SHA1  : 49f501cc222c81f1e7bb6fa516aed366c8781445

File size : 285696 bytes
Dicha version del ELISTARA 24.59 QUE LO DETECTA Y ELIMINA ESTARÁ DISPONIBLE EN NUESTRA WEB A PARTIR DE LAS 19 H CEST de hoy

saludos

ms, 4-1-2012