NUEVA VARIANTE DE BRONTOK CAZADO POR LA HEURTSICA DEL ELISTARA Y CONTROLADA DESDE EL ELITRIIP 7.98

Un viejo conocido que se esconde con el nombre del SVCHOST.EXE e infecta pendrives ya está controlado por el actual ELITRIIP si bien el ELISTARA lo detecta heuristicamente y pide muestra para analizar.

El preanalisis de virustotal ofrece el siguiente informe:

MD5 e65b9179a1a18ca163baedc2be3f158a
SHA1 f9714fb9bf72e71d0f5679c6b573aebe059f450d
File size 44.4 KB ( 45508 bytes )
SHA256: 90ca9195fe4ccd981e3a916c0422802c84b66b43bf81e3d9c86cfb4045d7bee7
File name: SVCHOST.EXE.Muestra EliStartPage v32.35
Detection ratio: 53 / 57
Analysis date: 2015-05-25 13:27:49 UTC ( 13 minutes ago )

0 2

Antivirus Result Update
ALYac Worm.Brontok-F 20150525
AVG Worm/Brontok.HW 20150525
AVware Email-Worm.Win32.Brontok.q 20150525
Ad-Aware Win32.Worm.Brontok.N 20150525
Agnitum I-Worm.Brontok.JH 20150524
AhnLab-V3 Win32/Brontok.worm.107008.B 20150525
Antiy-AVL Worm[Email]/Win32.Brontok 20150525
Avast Win32:Brontok-CE [Wrm] 20150525
Avira WORM/Brontok.Y 20150525
Baidu-International Adware.Win32.Genome.71 20150525
BitDefender Win32.Worm.Brontok.N 20150525
Bkav W32.BrontokQ.Worm 20150523
CAT-QuickHeal W32.Brontok.Q 20150523
CMC Generic.Win32.e65b9179a1!MD 20150525
ClamAV Worm.Brontok-10 20150525
Comodo Worm.Win32.Brontok.CO 20150525
Cyren W32/Backdoor.INJC-0912 20150525
DrWeb BackDoor.Generic.3162 20150525
ESET-NOD32 Win32/Brontok.CO 20150525
Emsisoft Win32.Worm.Brontok.N (B) 20150525
F-Prot W32/Backdoor.IDJ 20150525
F-Secure Win32.Worm.Brontok.N 20150525
GData Win32.Worm.Brontok.N 20150525
Ikarus Email-Worm.Win32.Brontok 20150525
Jiangmin I-Worm/Brontok.ij 20150522
K7AntiVirus Trojan ( 000004da1 ) 20150525
K7GW Trojan ( 000004da1 ) 20150525
Kaspersky Trojan.Win32.Genome.meyo 20150525
Kingsoft Worm.Brontok.q.(kcloud) 20150525
Malwarebytes Trojan.Dropper 20150525
McAfee W32/Rontokbro.gen@MM 20150525
McAfee-GW-Edition BehavesLike.Win32.Sality.pc 20150525
MicroWorld-eScan Win32.Worm.Brontok.N 20150525
Microsoft Worm:Win32/Brontok.Y@mm 20150525
NANO-Antivirus Trojan.Win32.Alman.btuxjj 20150525
Norman Rontokbro 20150525
Panda W32/Brontok.N.worm 20150525
Qihoo-360 Trojan.Generic 20150525
Rising PE:Trojan.Win32.Generic.14341A8A!338958986 20150525
SUPERAntiSpyware Trojan.Agent/Gen-SV 20150523
Sophos W32/Brontok-Gen 20150525
Symantec W32.Rontokbro@mm 20150525
Tencent Trojan.Win32.FakeFolder.v 20150525
TheHacker Trojan/Rontokbro.genw 20150521
TotalDefense Win32/Robknot.AN 20150525
TrendMicro WORM_BRONTOK.BA 20150525
TrendMicro-HouseCall WORM_BRONTOK.BA 20150525
VBA32 Trojan.VBRA.06574 20150523
VIPRE Email-Worm.Win32.Brontok.q 20150525
ViRobot I-Worm.Win32.Brontok.45508[h] 20150525
Zillya Worm.Brontok.Win32.294 20150525
Zoner I-Worm.Brontok.CO 20150521
nProtect Worm/W32.Brontok.45508 20150522

Dicha version del ELITRIIP 7.98 que lo detecta y elimina, ya está disponible en nuestra web

saludos

ms, 25-5-2015