INSTALACION DE VARIOS ADWARES BRAPPWARE POR LA EJECUCION DE UN DOWNWARE

De un Downware controlado como ADware ADLOAD, se instalan otros tres adwares…
El preanalisis de virustotal del downware que los instala es el siguiente:
MD5 2a714c18df9930a4686a31b746ac4586
SHA1 9f06369ddebfca6c67289362c07ba63f30b621a8
File size 74.0 KB ( 75767 bytes )
SHA256: b57b04871c3bf661433eb2f704017e3b3234876c1c095122c3678597f796bb42
File name: dowmware adload
Detection ratio: 21 / 57
Analysis date: 2015-10-08 14:12:00 UTC ( 2 minutes ago )

0 1

Antivirus Result Update
AVware Trojan.Win32.Generic!BT 20151008
Avast Win32:Adware-gen [Adw] 20151008
Avira TR/Dldr.Adload.jdue 20151008
Comodo UnclassifiedMalware 20151008
Cyren W32/S-10c392dd!Eldorado 20151008
ESET-NOD32 NSIS/TrojanDownloader.Adload.R 20151008
F-Prot W32/S-10c392dd!Eldorado 20151008
Fortinet Adware/Adload 20151008
K7AntiVirus Trojan-Downloader ( 0049a60c1 ) 20151008
K7GW Trojan-Downloader ( 0049a60c1 ) 20151008
Kaspersky not-a-virus:AdWare.Win32.AdLoad.klfb 20151008
McAfee Artemis!2A714C18DF99 20151008
McAfee-GW-Edition BehavesLike.Win32.PUP.lh 20151008
NANO-Antivirus Riskware.Win32.AdLoad.dxqadk 20151008
Panda Generic Suspicious 20151008
Qihoo-360 Win32/Trojan.7d2 20151008
Rising NS:Downloader.Adload!1.A0F0[F1] 20151007
Sophos Mal/Generic-S 20151008
Tencent Nsis.Trojan-downloader.Adload.Hsir 20151008
VBA32 AdWare.AdLoad 20151008
VIPRE Trojan.Win32.Generic!BT 20151008

Y los tres adwares creados tienen estos nombres:
ActSys.exe

CashReminder.exe

WNet.exe
De los cuales el analisis en virustotal del primero ofrece este informe:
MD5 5b46443f5326d4e7b8bb243229e824ba
SHA1 4161ddcccd76bb815f22426f9bd78ff7e7b61b5d
File size 442.1 KB ( 452664 bytes )
SHA256: 98a9b530012c3971422c71b145115c4f2767e61f0a118da64334beb8b8241804
File name: ActSys.exe
Detection ratio: 18 / 57
Analysis date: 2015-10-08 14:04:57 UTC ( 16 minutes ago )

0 1
Antivirus Result Update
AVware Yontoo 20151008
AhnLab-V3 PUP/Win32.Yontoo 20151008
Avira ADWARE/Adware.Gen 20151008
Bkav W32.HfsAdware.3649 20151008
Comodo ApplicUnwnt 20151008
DrWeb Trojan.Fraudster.1624 20151008
ESET-NOD32 a variant of Win32/Adware.BrAppWare.A 20151008
Fortinet Riskware/BrAppWare 20151008
GData Win32.Application.Agent.1U0J1K 20151008
Ikarus PUA.BrAppWare 20151008
K7AntiVirus Adware ( 004b8f4a1 ) 20151008
K7GW Adware ( 004b8f4a1 ) 20151008
McAfee Artemis!5B46443F5326 20151008
McAfee-GW-Edition Artemis!PUP 20151008
Rising PE:Malware.RDM.42!5.30[F1] 20151007
Sophos Generic PUA EB (PUA) 20151008
VIPRE Yontoo 20151008
Zillya Adware.BrAppWare.Win32.49 20151008
pasandolos todos a controlar como BRAPPWARE a partir del ELISTARA 33-10 de hoy
Dicha version del ELISTARA 33.10 QUE LOS DETECTA Y ELIMINA, estará disponible en nuestra web a partir de las 19 h CEST de hoy
saludos

ms, 8-10-2015