Nuevo control de malware EZG

A partir de la version 24.73 del ELISTARA de hoy, pasamos a controlar este nuevo malware

El preanalisis de virustotal ofrece el siguiente informe:

Nombre del fichero: winupdate.exe (UserInit).vir

SHA256: d8f4b52ca8b3b68fe52094e5fa7931306b32deeccfa5a11de8c9befa75147c2a
SHA1: 825dce2bbc2d3295622a2055b95adee36074147f
MD5: 87b5daad3ddc830e595bb4d06ae1c609
File size: 713.5 KB ( 730624 bytes )
File type: Win32 EXE
Detection ratio: 35 / 43
Analysis date: 2012-01-25 10:37:34 UTC ( 1 hour, 22 minutes ago )

02Antivirus Result Update
AhnLab-V3 Trojan/Win32.Siscos 20120122
AntiVir TR/Spy.Gen2 20120123
Antiy-AVL Trojan/Win32.Siscos.gen 20120121
Avast Win32:Delf-AIC [Trj] 20120123
AVG Delf.UOB 20120123
BitDefender Trojan.Generic.KDV.70546 20120123
ByteHero – 20120125
CAT-QuickHeal Backdoor.Fynloski.A9 20120123
ClamAV – 20120123
Commtouch W32/Downloader.C.gen!Eldorado 20120123
Comodo Backdoor.Win32.Delf.NVCC 20120123
DrWeb BackDoor.Comet.16 20120124
Emsisoft Backdoor.Win32.Fynloski!IK 20120123
eSafe – 20120123
eTrust-Vet Win32/Fynloski.A!generic 20120123
F-Prot W32/Downloader.C.gen!Eldorado 20120123
F-Secure Trojan.Generic.KDV.70546 20120123
Fortinet W32/Delf.NHY!tr 20120124
GData Trojan.Generic.KDV.70546 20120123
Ikarus Backdoor.Win32.Fynloski 20120123
Jiangmin Backdoor/Curioso.bj 20120123
K7AntiVirus Backdoor 20120123
Kaspersky Backdoor.Win32.Curioso.axf 20120124
McAfee BackDoor-EZG.c 20120121
McAfee-GW-Edition BackDoor-EZG.c 20120124
Microsoft VirTool:Win32/DelfInject.gen!BI 20120123
NOD32 a variant of Win32/Delf.NVC 20120123
Norman W32/Delf.FHCT 20120123
nProtect Backdoor/W32.Curioso.730624 20120123
Panda Generic Trojan 20120123
PCTools Backdoor.Krademok 20120123
Prevx – 20120125
Rising Suspicious 20120118
Sophos Mal/Luiha-A 20120123
SUPERAntiSpyware – 20120123
Symantec Backdoor.Krademok 20120124
TheHacker – 20120123
TrendMicro BKDR_FYNLOS.SMIA 20120123
TrendMicro-HouseCall BKDR_FYNLOS.SMIA 20120124
VBA32 Backdoor.Curioso.axf 20120123
VIPRE Backdoor.Win32.Fynloski.A (v) 20120123
ViRobot – 20120123
VirusBuster – 20120123

Dicha version del ELISTARA 24.73 que lo detecta y elimina, estar[a disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 25/1/2012