Otra variante de ADWARE YONTOO aun muy poco controlada actualmente (solo 4 de 42)

Variante del ADWARE YONTOO que pasamos a controlar a partir de ELISTARA 24.67

el preanalisis de virustotal ofrece el siguiente informe:

Nombre de fichero:  YONTOOIECLIENT.DLL.Muestra EliStartPage v24.66

SHA256: a4b3c92726aca34e43ebaf1df226de0d11dd85471467117172b31ac94b2f312c
SHA1: 22d5af4a374803615c243e093500e2f615302dd6
MD5: 25e14da0ce3be8746b60d2c95f0b08e5
File size: 190.3 KB ( 194848 bytes )
File type: Win32 DLL
Detection ratio: 4 / 42
Analysis date: 2011-06-18 00:24:43 UTC ( 7 months ago )

01Antivirus Result Update
AhnLab-V3 – 20110617
AntiVir – 20110617
Antiy-AVL – 20110617
Avast – 20110618
Avast5 – 20110618
AVG Generic4.BJMH 20110617
BitDefender – 20110618
CAT-QuickHeal – 20110617
ClamAV – 20110617
Commtouch – 20110618
Comodo – 20110618
DrWeb – 20110618
eSafe – 20110615
eTrust-Vet – 20110617
F-Prot – 20110618
F-Secure – 20110618
Fortinet – 20110617
GData – 20110617
Ikarus – 20110617
Jiangmin – 20110617
K7AntiVirus – 20110617
Kaspersky – 20110618
McAfee – 20110618
McAfee-GW-Edition – 20110618
Microsoft – 20110613
NOD32 Win32/Adware.Yontoo.A 20110618
Norman – 20110617
nProtect – 20110617
Panda – 20110617
PCTools – 20110617
Prevx – 20110618
Rising – 20110617
Sophos – 20110618
SUPERAntiSpyware – 20110618
Symantec – 20110618
TheHacker – 20110614
TrendMicro – 20110617
TrendMicro-HouseCall – 20110618
VBA32 Adware.Yontoo.a 20110617
VIPRE Yontoo (v) 20110618
ViRobot – 20110617
VirusBuster – 20110617
Dicha version del ELISTARA 24.67 que lo detecta y elimina estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 17-1-2012