NUEVA VARIANTE DE ROOTKIT CUTWAIL BE CAZADO POR LA HEURISTICA DEL ELISTARA

Otra muestra pedida por el ELISTARA pasa a ser controlada especificamente a partir de la version 32.36 dek ELISTARA de hoy

El preanalisis de virustotal ofrece el siguiente informe:

MD5 c3900aff586b1401cfc33d23af290ad9
SHA1 f6b9e9b400d8f7f11947cb6a002e2b06609ec8f3
File size 84.0 KB ( 86016 bytes )
SHA256: 2adb5d3d09ad26451c3d5efc6f1dd1b19f5947b56e568406f29503f0a2d2025a
File name: SYSHOST.EXE.Muestra EliStartPage v32.35
Detection ratio: 48 / 57
Analysis date: 2015-05-25 08:36:22 UTC ( 1 minute ago )

0 1

Antivirus Result Update
ALYac Trojan.GenericKD.1614661 20150525
AVG Downloader.Generic13.BZIX 20150525
AVware Trojan.Win32.Generic!BT 20150525
Ad-Aware Trojan.GenericKD.1614661 20150525
Agnitum Trojan.DL.Necurs!ZVvodNUBCAI 20150524
AhnLab-V3 Trojan/Win32.Ransomlock 20150524
Antiy-AVL Trojan[Dropper]/Win32.Necurs 20150525
Avast Win32:Kryptik-NNN [Trj] 20150525
Avira TR/Crypt.Xpack.62272 20150525
Baidu-International Trojan.Win32.Dropper.tpl 20150525
BitDefender Trojan.GenericKD.1614661 20150525
Bkav W32.LosysteLTH.Trojan 20150523
ByteHero Trojan.Malware.Obscu.Gen.002 20150525
CAT-QuickHeal Trojan.Necurs.MUE.A3 20150523
Comodo UnclassifiedMalware 20150525
Cyren W32/Backdoor.RNTE-3663 20150525
DrWeb Trojan.Click3.6411 20150525
ESET-NOD32 Win32/TrojanDownloader.Necurs.B 20150525
Emsisoft Trojan.GenericKD.1614661 (B) 20150525
F-Prot W32/Backdoor2.HUIG 20150525
F-Secure Trojan.GenericKD.1614661 20150524
Fortinet W32/Kryptik.FF!tr 20150525
GData Trojan.GenericKD.1614661 20150525
Ikarus Trojan.Win32.Necurs 20150525
Jiangmin TrojanDropper.Necurs.bue 20150522
K7AntiVirus Trojan-Downloader ( 003b48d61 ) 20150525
K7GW Trojan-Downloader ( 003b48d61 ) 20150525
Kaspersky Trojan-Dropper.Win32.Necurs.tpl 20150525
Malwarebytes Trojan.Necurs.Gen 20150525
McAfee Generic.dx!C3900AFF586B 20150525
McAfee-GW-Edition Generic.dx!C3900AFF586B 20150524
MicroWorld-eScan Trojan.GenericKD.1614661 20150525
Microsoft Trojan:Win32/Bulta!rfn 20150525
NANO-Antivirus Trojan.Win32.Necurs.cvtlfx 20150525
Norman Troj_Generic.TDFOB 20150525
Panda Trj/WLT.A 20150524
Qihoo-360 HEUR/Malware.QVM20.Gen 20150525
Rising PE:Trojan.Win32.Generic.169A6C6A!379219050 20150524
Sophos Mal/Emotet-A 20150525
Symantec Backdoor.Necurs 20150525
Tencent Trojan.Win32.YY.Gen.6 20150525
TotalDefense Win32/Necurs.AP 20150524
TrendMicro TROJ_WC.F0BEE05L114 20150525
TrendMicro-HouseCall TROJ_WC.F0BEE05L114 20150525
VBA32 TrojanDropper.Necurs 20150523
VIPRE Trojan.Win32.Generic!BT 20150525
Zillya Dropper.Necurs.Win32.3084 20150524
nProtect Trojan.GenericKD.1614661 20150522

DIcha versión del ELISTARA 32.36 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 25-5-2015