NUEVAS VARIANTES DE DOWNLOADER SOUNDER cazadas por el sistema heuristico del ELISTARA

Dos nuevas variantes de este downloader pasan a ser controladas especificamente a partir del ELISTARA 28.98 de hoy

El preanalisis de viriustotal ofrece estos informes:
MD5 3addbf9a2810e4727aca80334be10de9
SHA1 7d1d62f308dac37c8b9a8bccc6ee1456ed8bc499
File size 104.5 KB ( 107008 bytes )
SHA256: e00044e13a9729612ad9d94bbad72a869903368415b8af3c46d7559d53c0938c
Nombre: MSAIONAXQ.EXE.Muestra EliStartPage v28.95
Detecciones: 28 / 49
Fecha de análisis: 2013-12-16 09:55:29 UTC ( hace 0 minutos )

0 1
Antivirus Resultado Actualización
MicroWorld-eScan  20131216
Malwarebytes  20131216
TheHacker  20131216
K7GW  20131213
K7AntiVirus  20131213
F-Prot  20131216
Norman  20131216
TotalDefense  20131214
ClamAV  20131216
BitDefender  20131211
NANO-Antivirus  20131216
SUPERAntiSpyware  20131215
ByteHero  20130613
Ad-Aware  20131211
Emsisoft  20131216
Jiangmin  20131216
Antiy-AVL  20131210
Kingsoft  20130829
ViRobot  20131216
Commtouch  20131216
Ikarus  20131216
ESET-NOD32 a variant of Win32/Kryptik.BQWU 20131216
AhnLab-V3 ASD.Prevention 20131215
Agnitum Backdoor.Androm!2/XIY+A3HGw 20131215
CAT-QuickHeal Backdoor.Androm.bjf 20131216
Symantec Backdoor.Trojan 20131216
Baidu-International Backdoor.Win32.Androm.ay 20131213
Kaspersky Backdoor.Win32.Androm.bjfg 20131216
nProtect Backdoor/W32.Androm.107008.C 20131216
VBA32 BScope.Trojan-Spy.Zbot 20131216
AVG Crypt_s.FCD 20131215
Bkav HW32.CDB.Aa0e 20131216
Sophos Mal/Generic-S 20131216
CMC Packed.Win32.Katusha.1!O 20131213
Rising PE:Malware.XPACK-HIE/Heur!1.9C48 20131216
McAfee RDN/Generic.grp!gn 20131216
McAfee-GW-Edition RDN/Generic.grp!gn 20131216
AntiVir TR/Rogue.1451371 20131216
Panda Trj/CI.A 20131215
TrendMicro-HouseCall TROJ_GEN.R0CBC0ELF13 20131216
TrendMicro TROJ_GEN.R0CBC0ELF13 20131216
F-Secure Trojan.GenericKD.1451371 20131214
GData Trojan.GenericKD.1451371 20131216
DrWeb Trojan.Inject2.23 20131216
VIPRE Trojan.Win32.Generic!BT 20131216
Comodo UnclassifiedMalware 20131216
Fortinet W32/Androm.BJFG!tr.bdr 20131216
Avast Win32:Malware-gen 20131216
Microsoft Worm:Win32/Gamarue.I 20131216
y el otro:
MD5 7ef55a49959ed051d889419efbe38105
SHA1 d5624fdd4fc76e0598c1d1e401e6d1988fe3bc8c
File size 54.0 KB ( 55296 bytes )
SHA256: af2a919a2c7c04c2cc58b5233e15d417f559f7abb5c2c78ff0ba8fd3fdae2aa6
Nombre: vti-rescan
Detecciones: 21 / 49
Fecha de análisis: 2013-12-16 08:10:31 UTC ( hace 1 hora, 48 minutos )

0 1 

Antivirus Resultado Actualización
Ad-Aware  20131211
Agnitum  20131215
AhnLab-V3 ASD.Prevention 20131215
AntiVir TR/Gamarue.A.126 20131216
Antiy-AVL  20131210
Avast Win32:Malware-gen 20131216
AVG BackDoor.Generic18.AGD 20131215
Baidu-International Backdoor.Win32.Androm.AqJ 20131213
BitDefender  20131211
Bkav  20131216
ByteHero  20130613
CAT-QuickHeal  20131216
ClamAV  20131216
CMC  20131213
Commtouch  20131216
Comodo  20131216
DrWeb Trojan.Inject2.23 20131216
Emsisoft  20131216
ESET-NOD32 Win32/TrojanDownloader.Wauchos.X 20131215
F-Prot  20131216
F-Secure Trojan.GenericKD.1454172 20131214
Fortinet W32/Androm.BJHD!tr.bdr 20131216
GData Trojan.GenericKD.1454172 20131216
Ikarus Backdoor.Win32.Androm 20131216
Jiangmin  20131216
K7AntiVirus  20131213
K7GW  20131213
Kaspersky Backdoor.Win32.Androm.bjhd 20131216
Kingsoft  20130829
Malwarebytes Trojan.Agent 20131216
McAfee RDN/Generic BackDoor!vr 20131216
McAfee-GW-Edition RDN/Generic BackDoor!vr 20131216
Microsoft  20131216
MicroWorld-eScan  20131216
NANO-Antivirus  20131216
Norman Troj_Generic.RPZNS 20131216
nProtect  20131216
Panda  20131215
Rising  20131216
Sophos Mal/Generic-S 20131216
SUPERAntiSpyware  20131215
Symantec WS.Reputation.1 20131216
TheHacker  20131216
TotalDefense  20131214
TrendMicro TROJ_SPNR.1ALF13 20131216
TrendMicro-HouseCall TROJ_SPNR.1ALF13 20131216
VBA32  20131216
VIPRE Trojan.Win32.Generic!BT 20131216
ViRobot  20131216
Dicha version del ELISTARA 28.98 que los detecta y elimina,e stará disponioble en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 16-12-2013