VARIANTES de PROXY EXI casi uno de ellos casi no detectado por los AV actuales:

Nuevas muestras pedidas por el ELISTARA, QUE PASAN A SER CONTROLADAS ESPECIFICAMENTE A PARTIR DEL 24.61 del ELISTARA de hoy
Los preanalisis de virustotal ofrecen estos informes:
File name: DF0.EXE.Muestra EliStartPage v24.60
Submission date: 2012-01-09 16:29:49 (UTC)

Result: 3/ 43 (7.0%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2012.01.08.00 2012.01.08 –
AntiVir 7.11.20.195 2012.01.08 –
Antiy-AVL 2.0.3.7 2012.01.08 –
Avast 6.0.1289.0 2012.01.08 –
AVG 10.0.0.1190 2012.01.08 –
BitDefender 7.2 2012.01.08 –
ByteHero 1.0.0.1 2011.12.31 –
CAT-QuickHeal 12.00 2012.01.08 –
ClamAV 0.97.3.0 2012.01.07 –
Commtouch 5.3.2.6 2012.01.07 –
Comodo 11216 2012.01.08 –
DrWeb 5.0.2.03300 2012.01.08 –
Emsisoft 5.1.0.11 2012.01.08 –
eSafe 7.0.17.0 2012.01.08 –
eTrust-Vet 37.0.9668 2012.01.06 –
F-Prot 4.6.5.141 2012.01.07 –
F-Secure 9.0.16440.0 2012.01.08 –
Fortinet 4.3.388.0 2012.01.08 –
GData 22 2012.01.08 –
Ikarus T3.1.1.109.0 2012.01.08 –
Jiangmin 13.0.900 2012.01.08 –
K7AntiVirus 9.123.5881 2012.01.06 Backdoor
Kaspersky 9.0.0.837 2012.01.08 –
McAfee 5.400.0.1158 2012.01.08 –
McAfee-GW-Edition 2010.1E 2012.01.08 –
Microsoft 1.7903 2012.01.08 –
NOD32 6777 2012.01.08 –
Norman 6.07.13 2012.01.08 –
nProtect 2012-01-08.01 2012.01.08 –
Panda 10.0.3.5 2012.01.08 Trj/CI.A
PCTools 8.0.0.5 2012.01.08 –
Prevx 3.0 2012.01.09 –
Rising 23.91.04.02 2012.01.06 –
Sophos 4.73.0 2012.01.08 Sus/UnkPack-C
SUPERAntiSpyware 4.40.0.1006 2012.01.07 –
Symantec 20111.2.0.82 2012.01.08 –
TheHacker 6.7.0.1.373 2012.01.08 –
TrendMicro 9.500.0.1008 2012.01.08 –
TrendMicro-HouseCall 9.500.0.1008 2012.01.08 –
VBA32 3.12.16.4 2012.01.06 –
VIPRE 11370 2012.01.08 –
ViRobot 2012.1.7.4869 2012.01.08 –
VirusBuster 14.1.157.0 2012.01.08 –

Additional informationShow all
MD5   : 098933bc1e4fdd44687bfcce8b2eb881
SHA1  : e13b04fe3ae2d5463cb25b3f8e52fa35651d8869

File size : 302592 bytes

________
File name: 320B3.EXE.Muestra EliStartPage v24.60
Submission date: 2012-01-09 16:33:29 (UTC)

Result: 31/ 43 (72.1%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2012.01.08.00 2012.01.08 Backdoor/Win32.Gbot
AntiVir 7.11.20.195 2012.01.08 TR/Kazy.489812
Antiy-AVL 2.0.3.7 2012.01.08 Trojan/win32.agent.gen
Avast 6.0.1289.0 2012.01.08 Win32:Cybota [Trj]
AVG 10.0.0.1190 2012.01.08 Generic26.AIHU
BitDefender 7.2 2012.01.08 Gen:Variant.Kazy.48981
ByteHero 1.0.0.1 2011.12.31 –
CAT-QuickHeal 12.00 2012.01.08 –
ClamAV 0.97.3.0 2012.01.07 –
Commtouch 5.3.2.6 2012.01.07 W32/Goolbot.P.gen!Eldorado
Comodo 11216 2012.01.08 TrojWare.Win32.Kryptik.XMV
DrWeb 5.0.2.03300 2012.01.08 BackDoor.Gbot.1505
Emsisoft 5.1.0.11 2012.01.08 Backdoor.Win32.Cycbot!IK
eSafe 7.0.17.0 2012.01.08 –
eTrust-Vet 37.0.9668 2012.01.06 Win32/Gbot.E!generic
F-Prot 4.6.5.141 2012.01.07 W32/Goolbot.P.gen!Eldorado
F-Secure 9.0.16440.0 2012.01.08 Gen:Variant.Kazy.48981
Fortinet 4.3.388.0 2012.01.08 W32/CycBot.R!tr
GData 22 2012.01.08 Gen:Variant.Kazy.48981
Ikarus T3.1.1.109.0 2012.01.08 Backdoor.Win32.Cycbot
Jiangmin 13.0.900 2012.01.08 –
K7AntiVirus 9.123.5881 2012.01.06 Backdoor
Kaspersky 9.0.0.837 2012.01.08 HEUR:Trojan.Win32.Generic
McAfee 5.400.0.1158 2012.01.08 BackDoor-EXI.gen.aa
McAfee-GW-Edition 2010.1E 2012.01.08 BackDoor-EXI.gen.aa
Microsoft 1.7903 2012.01.08 Backdoor:Win32/Cycbot.G
NOD32 6777 2012.01.08 a variant of Win32/Kryptik.XMV
Norman 6.07.13 2012.01.08 W32/Cycbot.EX
nProtect 2012-01-08.01 2012.01.08 –
Panda 10.0.3.5 2012.01.08 Generic Malware
PCTools 8.0.0.5 2012.01.08 –
Prevx 3.0 2012.01.09 –
Rising 23.91.04.02 2012.01.06 Trojan.Win32.Generic.12ACBB0D
Sophos 4.73.0 2012.01.08 Troj/CycBot-R
SUPERAntiSpyware 4.40.0.1006 2012.01.07 –
Symantec 20111.2.0.82 2012.01.08 –
TheHacker 6.7.0.1.373 2012.01.08 –
TrendMicro 9.500.0.1008 2012.01.08 BKDR_CYCBOT.SME3
TrendMicro-HouseCall 9.500.0.1008 2012.01.08 BKDR_CYCBOT.SME3
VBA32 3.12.16.4 2012.01.06 BScope.Backdoor.Cycbot.2821
VIPRE 11370 2012.01.08 Trojan.Win32.Generic!BT
ViRobot 2012.1.7.4869 2012.01.08 –
VirusBuster 14.1.157.0 2012.01.08 Trojan.Cycbot.Gen!Pac.6

Additional informationShow all
MD5   : c79697d9d17a923b560db1f3fbe6aab8
SHA1  : 78702f46b3b9d44f74eeb83ce88f751054e93c50

File size : 176128 bytes

Dicha ELISTARA 24,61 que los detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 9-1-2012