Nuevas Variantes de MyWeb Search

Dos nuevas variantes de este malware pasan a ser controladas a partir del ELISTARA2 4.71 de hoy
El preanalisis de virustotal ofrece el siguiente informe:
Nombre del fichero : 64bar.dll

SHA256: 7b6924a1daae67ffb1b69f060fe5d6f6bf0a9681307feb2478281b5418e5ebb2
SHA1: a2291a55257865e3b311d421cf89efdc020e517b
MD5: f2b77ba18cb741c0b924d441c0efef6d
File size: 673.4 KB ( 689552 bytes )
File type: Win32 DLL
Tags: signed
Detection ratio: 4 / 43
Analysis date: 2012-01-23 12:24:52 UTC ( 2 hours, 58 minutes ago )

01Antivirus Result Update
AhnLab-V3 – 20120122
AntiVir – 20120123
Antiy-AVL – 20120120
Avast Win32:PUP-gen [PUP] 20120123
AVG AdInstaller.FunWeb 20120123
BitDefender – 20120123
ByteHero – 20120111
CAT-QuickHeal – 20120123
ClamAV Adware.MyWebSearch-18 20120123
Commtouch – 20120123
Comodo – 20120123
DrWeb – 20120123
Emsisoft – 20120123
eSafe – 20120123
eTrust-Vet – 20120123
F-Prot – 20120122
F-Secure – 20120123
Fortinet – 20120123
GData – 20120123
Ikarus – 20120123
Jiangmin – 20120122
K7AntiVirus – 20120120
Kaspersky – 20120123
McAfee – 20120122
McAfee-GW-Edition – 20120122
Microsoft – 20120123
NOD32 – 20120123
Norman – 20120123
nProtect – 20120123
Panda – 20120122
PCTools – 20120123
Prevx – 20120123
Rising – 20120118
Sophos – 20120123
SUPERAntiSpyware – 20120122
Symantec – 20120123
TheHacker – 20120123
TrendMicro – 20120123
TrendMicro-HouseCall – 20120123
VBA32 – 20120120
VIPRE MyWebSearch.J (v) (not malicious) 20120123
ViRobot – 20120123
VirusBuster – 20120122
_________

Nombre Fichero 64SrcAs.dll

SHA256: 45c3cfdef55ea3abc14fab5d25cffd0e08306f91aaea4a67248ee702e7b9fd7b
SHA1: c4b330ef102bf596943503b0e8c5d39a5b3dcfe2
MD5: 57dd8aed0e235b1bb1e588199883c84b
File size: 61.4 KB ( 62864 bytes )
File type: Win32 DLL
Tags: signed
Detection ratio: 4 / 43
Analysis date: 2012-01-05 02:13:11 UTC ( 2 weeks, 4 days ago )

11Antivirus Result Update
AhnLab-V3 – 20120104
AntiVir – 20120104
Antiy-AVL – 20120104
Avast Win32:FunWeb-K [PUP] 20120104
AVG AdInstaller.FunWeb 20120105
BitDefender – 20120105
ByteHero – 20111231
CAT-QuickHeal – 20120104
ClamAV Adware.MyWebSearch-18 20120105
Commtouch – 20120104
Comodo – 20120104
DrWeb – 20120105
Emsisoft – 20120104
eSafe – 20120103
eTrust-Vet – 20120104
F-Prot – 20120103
F-Secure – 20120105
Fortinet – 20120104
GData – 20120105
Ikarus – 20111231
Jiangmin – 20120104
K7AntiVirus – 20120104
Kaspersky – 20120104
McAfee – 20120105
McAfee-GW-Edition – 20120104
Microsoft – 20120104
NOD32 – 20120105
Norman – 20120104
nProtect – 20120104
Panda – 20120104
PCTools – 20120105
Prevx – 20120105
Rising – 20120104
Sophos – 20120105
SUPERAntiSpyware – 20120105
Symantec – 20120105
TheHacker – 20120105
TrendMicro – 20120104
TrendMicro-HouseCall – 20120105
VBA32 – 20120104
VIPRE MyWebSearch.J (v) (not malicious) 20120105
ViRobot – 20120104
VirusBuster – 20120104

Dicha version del ELISTARA 24.71 que los detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 23-1-2012