Nuevas muestras de BUZUS / WAREDAT

Cazadas por la heuristica del ELISTARA, estas dos muestras pasan a ser controladas especificamente a partir del ELISTARA 24.66 de hoy

El preanalisis de virustotal ofrecen estos dos informes:

Nombre fichero : 2._EX-08.EXE.Muestra EliStartPage v24.65
SHA256: 6fb278b35e78ffdb12fdfdc7d20c9bc6ec32b974c6497140b398451b37071c1d
SHA1: 048a2b6b5ab7f3686f9ad49f99e564c38041cc5d
MD5: 5dcd1f76bf59af07ceb816d615d81e3b
File size: 478.0 KB ( 489472 bytes )
File type: Win32 EXE
Detection ratio: 9 / 43
Analysis date: 2012-01-16 15:59:21 UTC ( 0 minutes ago )

00
Antivirus Result Update
AhnLab-V3 – 20120116
AntiVir – 20120116
Antiy-AVL – 20120116
Avast – 20120116
AVG – 20120116
BitDefender – 20120116
ByteHero – 20120111
CAT-QuickHeal – 20120116
ClamAV – 20120116
Commtouch – 20120116
Comodo – 20120116
DrWeb Trojan.Packed.18626 20120116
Emsisoft Trojan.Win32.Buzus!IK 20120116
eSafe – 20120115
eTrust-Vet – 20120116
F-Prot – 20120116
F-Secure – 20120116
Fortinet – 20120115
GData – 20120116
Ikarus Trojan.Win32.Buzus 20120116
Jiangmin – 20120116
K7AntiVirus – 20120113
Kaspersky Backdoor.Win32.Proxyier.vm 20120116
McAfee Artemis!5DCD1F76BF59 20120116
McAfee-GW-Edition Artemis!5DCD1F76BF59 20120116
Microsoft – 20120116
NOD32 – 20120116
Norman W32/Kryptik.AZQ 20120116
nProtect – 20120116
Panda Suspicious file 20120116
PCTools – 20120116
Prevx – 20120116
Rising – 20120116
Sophos – 20120116
SUPERAntiSpyware – 20120114
Symantec – 20120116
TheHacker – 20120116
TrendMicro – 20120116
TrendMicro-HouseCall – 20120116
VBA32 – 20120116
VIPRE Backdoor.Win32.Hupigon (v) 20120116
ViRobot – 20120116
VirusBuster – 20120116

_______

Nombre Fichero : _EX-68.EXE.Muestra EliStartPage v24.65

SHA256: d23208657e6624b0967d1b3830d259279b702c89043e9dafe8b019569d1283e6
SHA1: 9b62f5abb953995d78fd787c48a381bd74cb4f69
MD5: 8c6c4b7eea8c7a4091975425b08edcd9
File size: 859.0 KB ( 879616 bytes )
File type: Win32 EXE
Detection ratio: 5 / 43
Analysis date: 2012-01-16 16:12:34 UTC ( 0 minutes ago )

01
Antivirus Result Update
AhnLab-V3 – 20120116
AntiVir – 20120116
Antiy-AVL – 20120116
Avast – 20120116
AVG – 20120116
BitDefender Gen:Variant.Kazy.53213 20120116
ByteHero – 20120111
CAT-QuickHeal – 20120116
ClamAV – 20120116
Commtouch – 20120116
Comodo – 20120116
DrWeb – 20120116
Emsisoft – 20120116
eSafe – 20120115
eTrust-Vet – 20120116
F-Prot – 20120116
F-Secure Gen:Variant.Kazy.53213 20120116
Fortinet – 20120115
GData Gen:Variant.Kazy.53213 20120116
Ikarus – 20120116
Jiangmin – 20120116
K7AntiVirus – 20120113
Kaspersky – 20120116
McAfee – 20120116
McAfee-GW-Edition Heuristic.LooksLike.Win32.Winwebsec.E 20120116
Microsoft – 20120116
NOD32 a variant of Win32/Kryptik.YZH 20120116
Norman – 20120116
nProtect – 20120116
Panda – 20120116
PCTools – 20120116
Prevx – 20120116
Rising – 20120116
Sophos – 20120116
SUPERAntiSpyware – 20120114
Symantec – 20120116
TheHacker – 20120116
TrendMicro – 20120116
TrendMicro-HouseCall – 20120116
VBA32 – 20120116
VIPRE – 20120116
ViRobot – 20120116
VirusBuster – 20120116
Dicha version del ELISTARA 24.66 que los detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 16-1-2012