NUEVA VARIANTE DE SIREFEF.F (ZEROACCESS) descargada por un DOWNLOADER Sounder

Otra variante de este temible rootkit, de la familia del ZEROACCESS, pasa a ser controlada a partir del ELISIREF 2.19 de hoy

El preanalisis de virustotal ofrece el siguiente informe:

MD5 5065af47269353e6b954022379f00a7e
SHA1 c5981de9a88b9a4c6681a87b490cf1ffc1ab793a
File size 259.0 KB ( 265216 bytes )
SHA256: 3c9df412aef88adf885dbd4a4ca638465839222d25703a5cb47c65715dfcd077
Nombre: 50-shades-ebook.exe
Detecciones: 37 / 49
Fecha de análisis: 2013-12-10 11:34:04 UTC ( hace 1 minuto )

0 3
Antivirus Resultado Actualización
Ad-Aware Trojan.GenericKD.1439992 20131210
Agnitum Backdoor.ZAccess!Dcbk5x9fQJQ 20131209
AhnLab-V3 Backdoor/Win32.ZAccess 20131210
AntiVir TR/Crypt.Xpack.32979 20131210
Antiy-AVL  20131210
Avast Win32:Malware-gen 20131210
AVG Generic_r.DGM 20131210
Baidu-International Backdoor.Win32.ZAccess.ARJ 20131210
BitDefender Trojan.GenericKD.1439992 20131210
Bkav  20131210
ByteHero  20130613
CAT-QuickHeal  20131209
ClamAV  20131209
CMC  20131202
Commtouch W32/Rorpian.C.gen!Eldorado 20131210
Comodo UnclassifiedMalware 20131210
DrWeb BackDoor.Maxplus.13104 20131210
Emsisoft  20131210
ESET-NOD32 Win32/Sirefef.FY 20131210
F-Prot W32/Rorpian.C.gen!Eldorado 20131210
F-Secure Trojan.GenericKD.1439992 20131210
Fortinet W32/ZAccess.EYJL!tr.bdr 20131210
GData Trojan.GenericKD.1439992 20131210
Ikarus Trojan-Dropper.Win32.Sirefef 20131210
Jiangmin  20131210
K7AntiVirus Trojan ( 00490c5a1 ) 20131209
K7GW Trojan ( 00490c5a1 ) 20131210
Kaspersky Backdoor.Win32.ZAccess.eyjl 20131210
Kingsoft  20130829
Malwarebytes Malware.Packer.ZA 20131210
McAfee ZeroAccess-FFB!5065AF472693 20131210
McAfee-GW-Edition ZeroAccess-FFB!5065AF472693 20131210
Microsoft TrojanDropper:Win32/Sirefef.gen!D 20131210
MicroWorld-eScan Trojan.GenericKD.1439992 20131210
NANO-Antivirus Trojan.Win32.Maxplus.cqkbfc 20131210
Norman ZAccess.BMNI 20131210
nProtect Backdoor/W32.ZAccess.265216.B 20131210
Panda Trj/CI.A 20131210
Rising PE:Malware.XPACK-LNR/Heur!1.5594 20131210
Sophos Troj/Agent-AFCM 20131210
SUPERAntiSpyware Trojan.Agent/Gen-Maxplus 20131209
Symantec WS.Reputation.1 20131210
TheHacker  20131209
TotalDefense  20131209
TrendMicro TROJ_GEN.R0CBC0DLA13 20131210
TrendMicro-HouseCall TROJ_GEN.R0CBC0DLA13 20131210
VBA32  20131210
VIPRE Trojan.Win32.Generic!BT 20131210
ViRobot Backdoor.Win32.S.ZeroAccess.265216 20131210

dICHA VERSION DEL ELISIREF 2.19 que lo detecta y elimina,e stará disponibel en neustra web a partir de las 19 h CEST de hoy

saludos

ms, 10-12-2013