variante de FAKE TOOL SYSTEM CHECK (dropper y scanner)

Nuevas muestras de dropper y scanner de FAKE TOOL SYSTEM CHECK

El preanalisis de virustotal ofrece estos informes:

dropper

SHA256: 318eaaec4c75dd32535e1f44a89c2aa1e0e0a9fb9b1053ed373543e5d3a367cc
SHA1: 8def33ed99c560c0af407e09ad658f53c9c1da9f
MD5: 3026981eeead05c990b547b800ece994
Tamaño: 442.5 KB ( 453120 bytes )
Nombre: HTWXTICLSKGOQA.EXE.Muestra EliStartPage v24.87
Tipo: Win32 EXE
Detecciones: 15 / 43
Fecha de análisis: 2012-02-16 11:15:26 UTC ( hace 1 minuto )

01
Antivirus Resultado Actualización
AhnLab-V3 – 20120215
AntiVir – 20120216
Antiy-AVL – 20120213
Avast Win32:Kryptik-HHY [Trj] 20120216
AVG Generic27.JYN 20120216
BitDefender Gen:Variant.Kazy.56372 20120216
ByteHero – 20120215
CAT-QuickHeal – 20120214
ClamAV – 20120216
Commtouch – 20120216
Comodo UnclassifiedMalware 20120216
DrWeb – 20120216
Emsisoft – 20120216
eSafe – 20120214
eTrust-Vet – 20120216
F-Prot – 20120215
F-Secure Gen:Variant.Kazy.56372 20120216
Fortinet W32/FakeAlert.IY!tr 20120216
GData Gen:Variant.Kazy.56372 20120216
Ikarus – 20120216
Jiangmin – 20120215
K7AntiVirus – 20120215
Kaspersky HEUR:Trojan.Win32.Generic 20120216
McAfee FakeAlert-SysDef.b 20120216
McAfee-GW-Edition FakeAlert-SysDef.b 20120215
Microsoft Trojan:Win32/FakeSysdef 20120216
NOD32 a variant of Win32/Kryptik.AARW 20120216
Norman – 20120216
nProtect – 20120216
Panda – 20120215
PCTools – 20120216
Prevx – 20120216
Rising – 20120216
Sophos Mal/FakeAV-OP 20120216
SUPERAntiSpyware – 20120206
Symantec – 20120216
TheHacker – 20120216
TrendMicro TROJ_FRAUD.SMXH 20120216
TrendMicro-HouseCall TROJ_FRAUD.SMXH 20120216
VBA32 – 20120216
VIPRE – 20120216
ViRobot – 20120216
VirusBuster – 20120215

______
scanner
SHA256: d05bcf07633ada8c8208122ccd75edd67c15403a015e97d51e64b315a16785e6
SHA1: 6e886d5f456dd1519ad39f21b011c9327ecc3ed0
MD5: bb61b3480449ff7ec313110d0935ef7b
Tamaño: 349.5 KB ( 357888 bytes )
Nombre: T0VXUXHPOIATMM.EXE.Muestra EliStartPage v24.87
Tipo: Win32 EXE
Detecciones: 14 / 43
Fecha de análisis: 2012-02-16 11:18:29 UTC ( hace 0 minutos )

01
Antivirus Resultado Actualización
AhnLab-V3 – 20120215
AntiVir – 20120216
Antiy-AVL – 20120213
Avast Win32:Kryptik-HHY [Trj] 20120216
AVG Generic27.KBC 20120216
BitDefender Gen:Variant.Kazy.56372 20120216
ByteHero – 20120212
CAT-QuickHeal – 20120214
ClamAV – 20120216
Commtouch – 20120216
Comodo – 20120216
DrWeb – 20120216
Emsisoft – 20120216
eSafe – 20120214
eTrust-Vet – 20120216
F-Prot – 20120215
F-Secure Gen:Variant.Kazy.56372 20120216
Fortinet W32/FakeAlert.IY!tr 20120216
GData Gen:Variant.Kazy.56372 20120216
Ikarus – 20120216
Jiangmin – 20120215
K7AntiVirus – 20120215
Kaspersky Trojan.Win32.FakeAV.kwrc 20120216
McAfee FakeAlert-SysDef.b 20120216
McAfee-GW-Edition FakeAlert-SysDef.b 20120215
Microsoft Trojan:Win32/FakeSysdef 20120216
NOD32 a variant of Win32/Kryptik.AARW 20120216
Norman – 20120216
nProtect – 20120216
Panda – 20120215
PCTools – 20120216
Prevx – 20120216
Rising – 20120216
Sophos Mal/FakeAV-OP 20120216
SUPERAntiSpyware – 20120206
Symantec – 20120216
TheHacker – 20120216
TrendMicro TROJ_FRAUD.SMXH 20120216
TrendMicro-HouseCall TROJ_FRAUD.SMXH 20120216
VBA32 – 20120216
VIPRE – 20120216
ViRobot – 20120216
VirusBuster – 20120215
Dicha version del ELISTARA 24.89 que los detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

SALUDOS

ms, 16-2-2012