NUEVA VARIANTE DE ADWARE DEFAULT TAB, cazado por la heuristica del ELISTARA

A partir de la version 28.71 del ELISTARA de hoy, pasamos a controlar esta nueva variante de malware
El preanalisis de viriustotal ofrece este informe:

SHA256: 838f80bd1445aa0ab677c8663d92dd0fc8ef8c13ce8f390c0d9359bdb05ed8a9
SHA1: ef5a5aff7f37bdc641d6f7e1e9f7086af70fb21e
MD5: 326b1ea8ec0b923ce1a6b12710423618
Tamaño: 52.6 KB ( 53880 bytes )
Nombre: vti-rescan
Tipo: Win32 EXE
Etiquetas: 64bits peexe assembly
Detecciones: 3 / 47
Fecha de análisis: 2013-11-05 20:39:35 UTC ( hace 20 horas, 25 minutos )

0 0 Warning! The submitted file bundles up potentially unwanted applications, pay close attention to the setup process in order to opt-out of undesired grayware that will try to install itself by default.
Más detalles Análisis File detail Información adicional Comentarios Votos Antivirus Resultado Actualización
Agnitum  20131105
AhnLab-V3  20131105
AntiVir  20131105
Antiy-AVL  20131101
Avast  20131105
AVG  20131105
Baidu-International  20131105
BitDefender  20131105
Bkav  20131105
ByteHero  20131105
CAT-QuickHeal  20131105
ClamAV  20131105
Commtouch  20131105
Comodo  20131105
DrWeb Adware.Plugin.48 20131105
Emsisoft  20131105
ESET-NOD32  20131105
F-Prot  20131105
F-Secure  20131105
Fortinet  20131105
GData  20131105
Ikarus  20131105
Jiangmin  20131105
K7AntiVirus  20131105
K7GW  20131105
Kaspersky  20131105
Kingsoft  20130829
Malwarebytes PUP.Optional.DefaultTab 20131105
McAfee  20131105
McAfee-GW-Edition  20131105
Microsoft  20131105
MicroWorld-eScan  20131028
NANO-Antivirus  20131105
Norman  20131105
nProtect  20131105
Panda  20131105
Rising  20131105
Sophos  20131105
SUPERAntiSpyware  20131105
Symantec  20131105
TheHacker  20131105
TotalDefense  20131104
TrendMicro  20131105
TrendMicro-HouseCall TROJ_GEN.F47V1102 20131105
VBA32  20131105
VIPRE  20131105
ViRobot  20131105
Dicha version del ELISTARA 28.71 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 6-11-2013