Nueva variante de ROOTKIT SPY ZBOT cazada por el ELISTARA

A partir de la version 24.69 del ELISTARA de hoy, pasamos a controlar esta nueva variante

El preanalisis de virustotal ofrece este informe:
nombre fichero : WIEX.EXE.Muestra EliStartPage v24.68

SHA256: d5daccfceef7aba90804eed3762bd91c4c5a7933702402bdff8d04590a68347a
SHA1: 16a1870880d053c9c8d1a1b9278298240fa1f338
MD5: 81f69940a90ef8bb91f7acefe8f5b6fc
File size: 147.5 KB ( 151040 bytes )
File type: Win32 EXE
Detection ratio: 5 / 40
Analysis date: 2012-01-19 16:27:15 UTC ( 2 minutes ago )

01
Antivirus Result Update
AhnLab-V3 – 20120119
AntiVir – 20120119
Antiy-AVL – 20120119
Avast – 20120119
AVG – 20120119
BitDefender – 20120119
CAT-QuickHeal – 20120119
ClamAV – 20120119
Commtouch – 20120119
Comodo – 20120119
DrWeb – 20120119
Emsisoft – 20120119
eSafe – 20120117
eTrust-Vet – 20120119
F-Prot – 20120118
F-Secure – 20120119
Fortinet – 20120119
GData – 20120119
Ikarus – 20120119
Jiangmin – 20120119
K7AntiVirus – 20120118
Kaspersky – 20120119
McAfee Generic BackDoor.wr 20120119
McAfee-GW-Edition Heuristic.BehavesLike.Win32.ModifiedUPX.C 20120119
Microsoft PWS:Win32/Zbot.gen!Y 20120119
NOD32 a variant of Win32/Kryptik.ZDG 20120119
Norman – 20120119
nProtect – 20120119
PCTools – 20120119
Prevx – 20120119
Rising – 20120118
SUPERAntiSpyware Trojan.Agent/Gen-Fake[Plus] 20120119
Symantec – 20120119
TheHacker – 20120119
TrendMicro – 20120119
TrendMicro-HouseCall – 20120119
VBA32 – 20120119
VIPRE – 20120119
ViRobot – 20120119
VirusBuster – 20120119
DIcha version del ELISTARA 24.69 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 19-1-2012