variantes de PROXY EXI (que cambia en cada actualización) aun poco controlados actualmente (solo 8 de 43 AV)

Tres variantes del mismo PROXY EXI, pasamos a controlarlas a partir de la version 24.93 del ELISTARA de hoy

Los preanalisis de virustotal ofrecen estos informes:
SHA256: 89ccace3175e5d3e499ba73f1943805ff0daf1291e38c69632167a46f15548ed
SHA1: e161704a02803ecb79db5102aca1aa8c1411dc47
MD5: f22b279d83565d4cc2a586d5657bc2d5
Tamaño: 179.0 KB ( 183296 bytes )
Nombre: lvvm(1).exe
Tipo: Win32 EXE
Detecciones: 8 / 43
Fecha de análisis: 2012-02-21 17:05:32 UTC ( hace 1 minuto )

01
Antivirus Resultado Actualización
AhnLab-V3 Trojan/Win32.Cycbot 20120221
AntiVir – 20120221
Antiy-AVL – 20120213
Avast – 20120221
AVG – 20120221
BitDefender – 20120221
ByteHero – 20120221
CAT-QuickHeal (Suspicious) – DNAScan 20120221
ClamAV – 20120221
Commtouch – 20120221
Comodo – 20120221
DrWeb – 20120221
Emsisoft – 20120221
eSafe – 20120219
eTrust-Vet – 20120221
F-Prot – 20120221
F-Secure – 20120221
Fortinet W32/CYCBot.F!tr 20120221
GData – 20120221
Ikarus – 20120221
Jiangmin – 20120220
K7AntiVirus Backdoor 20120220
Kaspersky – 20120221
McAfee – 20120221
McAfee-GW-Edition – 20120221
Microsoft Backdoor:Win32/Cycbot.G 20120221
NOD32 a variant of Win32/Kryptik.ABCX 20120221
Norman – 20120220
nProtect – 20120221
Panda Suspicious file 20120221
PCTools – 20120221
Prevx – 20120221
Rising – 20120221
Sophos – 20120221
SUPERAntiSpyware Trojan.Agent/Gen-Kazy[Ex] 20120206
Symantec – 20120221
TheHacker – 20120220
TrendMicro – 20120221
TrendMicro-HouseCall – 20120221
VBA32 – 20120221
VIPRE – 20120221
ViRobot – 20120221
VirusBuster – 20120221
________
SHA256: 434ac00cde18807156cd18d4beabacf0deafafde93896534600313411101e992
SHA1: 857a788465f9ce0c1b96af0f324b4ea0b2c550cb
MD5: baa5abadb6c1ea63b87cdfc3cd37d7b5
Tamaño: 183.5 KB ( 187904 bytes )
Nombre: lvvm(2).exe
Tipo: Win32 EXE
Detecciones: 8 / 43
Fecha de análisis: 2012-02-21 17:11:05 UTC ( hace 0 minutos )

01
Antivirus Resultado Actualización
AhnLab-V3 Trojan/Win32.Cycbot 20120221
AntiVir – 20120221
Antiy-AVL – 20120213
Avast – 20120221
AVG – 20120221
BitDefender – 20120221
ByteHero – 20120221
CAT-QuickHeal (Suspicious) – DNAScan 20120221
ClamAV – 20120221
Commtouch – 20120221
Comodo – 20120221
DrWeb – 20120221
Emsisoft – 20120221
eSafe – 20120219
eTrust-Vet – 20120221
F-Prot – 20120221
F-Secure – 20120221
Fortinet W32/CYCBot.F!tr 20120221
GData – 20120221
Ikarus – 20120221
Jiangmin – 20120220
K7AntiVirus Backdoor 20120220
Kaspersky – 20120221
McAfee – 20120221
McAfee-GW-Edition – 20120221
Microsoft Backdoor:Win32/Cycbot.G 20120221
NOD32 a variant of Win32/Kryptik.ABCX 20120221
Norman – 20120221
nProtect – 20120221
Panda Suspicious file 20120221
PCTools – 20120221
Prevx – 20120221
Rising – 20120221
Sophos – 20120221
SUPERAntiSpyware Trojan.Agent/Gen-Kazy[Ex] 20120206
Symantec – 20120221
TheHacker – 20120220
TrendMicro – 20120221
TrendMicro-HouseCall – 20120221
VBA32 – 20120221
VIPRE – 20120221
ViRobot – 20120221
VirusBuster – 20120221
________
SHA256: 3f540c79b405034324f7f4cceac6ff99ac25660f676115e1f844c58c11f4cc0c
SHA1: 426e1da506aa56f45e529f1ea61964ccaf95424b
MD5: 6245580b8a06bc3399c83764dfb9918e
Tamaño: 180.5 KB ( 184832 bytes )
Nombre: lvvm(3).exe
Tipo: Win32 EXE
Detecciones: 7 / 43
Fecha de análisis: 2012-02-21 17:13:01 UTC ( hace 1 minuto )

00
Antivirus Resultado Actualización
AhnLab-V3 Trojan/Win32.Cycbot 20120221
AntiVir – 20120221
Antiy-AVL – 20120213
Avast – 20120221
AVG – 20120221
BitDefender – 20120221
ByteHero – 20120221
CAT-QuickHeal (Suspicious) – DNAScan 20120221
ClamAV – 20120221
Commtouch – 20120221
Comodo – 20120221
DrWeb – 20120221
Emsisoft – 20120221
eSafe – 20120219
eTrust-Vet – 20120221
F-Prot – 20120221
F-Secure – 20120221
Fortinet W32/CYCBot.F!tr 20120221
GData – 20120221
Ikarus – 20120221
Jiangmin – 20120220
K7AntiVirus Backdoor 20120220
Kaspersky – 20120221
McAfee BackDoor-EXI.gen.aj 20120221
McAfee-GW-Edition – 20120221
Microsoft Backdoor:Win32/Cycbot.G 20120221
NOD32 – 20120221
Norman – 20120221
nProtect – 20120221
Panda – 20120221
PCTools – 20120221
Prevx – 20120221
Rising – 20120221
Sophos – 20120221
SUPERAntiSpyware Trojan.Agent/Gen-Kazy[Ex] 20120206
Symantec – 20120221
TheHacker – 20120220
TrendMicro – 20120221
TrendMicro-HouseCall – 20120221
VBA32 – 20120221
VIPRE – 20120221
ViRobot – 20120221
VirusBuster – 20120221

Dicha version del ELISTARA 24.93 que los detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 21-2-2012