Nueva variante de RelevantKnowledge

Nueva variante de esta malware que pasamos a controlar a partir del ELISTARA 24.68 de hoy

El preanalisis de virustotal muestra el siguiente informe:

Nombre Fichero RLLS.DLL (Notify).vir

SHA256: c2303d8fa0e47662d59ab2d1e6c18e19fe93858e1269045d47ec7df2a408bb01
SHA1: 213944024bcb0086f1f1268dadbcc27b94e687a5
MD5: 8e7af192f80a95925d503049ba64863c
File size: 380.6 KB ( 389760 bytes )
File type: Win32 DLL
Detection ratio: 23 / 43
Analysis date: 2012-01-18 15:09:46 UTC ( 0 minutes ago )

01
Antivirus Result Update
AhnLab-V3 – 20120118
AntiVir Adware/Agent.389760.3 20120118
Antiy-AVL AdWare/Win32.Relevant.gen 20120118
Avast Win32:Relevant-P [PUP] 20120118
AVG RelevantKnowledge 20120118
BitDefender Gen:Adware.Heur.xy9@RSKFplci 20120118
ByteHero – 20120116
CAT-QuickHeal – 20120118
ClamAV PUA.RelevantKnowledge 20120118
Commtouch W32/MalwareF.BSBM 20120118
Comodo – 20120118
DrWeb Adware.OSSProxy 20120118
Emsisoft Adware.RelevantKnowledge.bn!IK 20120118
eSafe – 20120117
eTrust-Vet – 20120118
F-Prot W32/MalwareF.BSBM 20120118
F-Secure Gen:Adware.Heur.xy9@RSKFplci 20120118
Fortinet Misc/Oss 20120118
GData Gen:Adware.Heur.xy9@RSKFplci 20120118
Ikarus not-a-virus:Adware.RelevantKnowledge.bn 20120118
Jiangmin – 20120118
K7AntiVirus Riskware 20120117
Kaspersky – 20120118
McAfee – 20120118
McAfee-GW-Edition – 20120118
Microsoft – 20120118
NOD32 Win32/Adware.RK 20120118
Norman – 20120118
nProtect – 20120118
Panda – 20120118
PCTools – 20120118
Prevx – 20120118
Rising – 20120118
Sophos Generic Proxy-OSS Application 20120118
SUPERAntiSpyware Spyware.RelevantKnowledge 20120118
Symantec – 20120118
TheHacker Adware/OneStep 20120117
TrendMicro – 20120118
TrendMicro-HouseCall – 20120118
VBA32 Signed-AdWare.Win32.Relevant 20120118
VIPRE Trojan.Win32.Generic!BT 20120118
ViRobot Adware.Relevant.389760 20120118
VirusBuster Adware.Agent2!/LjcYt9vUvQ 20120117

Dicha version del ELISTARA 24.68 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 18-1-2012