NUEVA VARIANTE DE RANSOM LOSYA CAZADO POR LA HEURISTICA DEL ELISTARA

Otra muestra pedida por el ELISTARA pasa a ser controlada especificamente como RANSOM LOSYA a partir del ELISTARA 33.12

El preanalisis de virustotal ofrece el siguiente informe:

MD5 63753079dc6a5d2fc6d65ef9136bf904
SHA1 adf7e8c7f1994cec718cec67687b67aeede1fe3b
File size 1.3 MB ( 1352704 bytes )
SHA256: 162bf4bcbfad431adb9366e16a48d28af88fe7acc9ffaeb0516f7c0f9db9a930
File name: QTWM.EXE.Muestra EliStartPage v33.11
Detection ratio: 41 / 56
Analysis date: 2015-10-13 10:53:16 UTC ( 1 day, 23 hours ago )

0 1
Antivirus Result Update
ALYac Gen:Variant.Symmi.48626 20151012
AVG Delf.ATAF 20151013
AVware Trojan.Win32.Generic!BT 20151013
Ad-Aware Gen:Variant.Symmi.48626 20151013
Agnitum Backdoor.DarkKomet!bQAMANpoFwo 20151012
Antiy-AVL Trojan[Backdoor]/Win32.DarkKomet 20151013
Arcabit Trojan.Symmi.DBDF2 20151013
Avast Win32:Teerac-E [Trj] 20151013
Avira DR/Delphi.A.4378 20151013
Baidu-International Backdoor.Win32.DarkKomet.fgzk 20151013
BitDefender Gen:Variant.Symmi.48626 20151013
Bkav W32.BuktoskoLTAS.Trojan 20151012
CAT-QuickHeal Backdoor.DarkKomet.g8 20151013
Comodo UnclassifiedMalware 20151013
Cyren W32/Trojan.CZVO-7535 20151013
DrWeb Trojan.Click3.9235 20151013
ESET-NOD32 Win32/Injector.BZVZ 20151013
Emsisoft Gen:Variant.Symmi.48626 (B) 20151013
F-Secure Gen:Variant.Symmi.48626 20151013
Fortinet W32/Delf.BOOP!tr 20151013
GData Gen:Variant.Symmi.48626 20151013
Ikarus Trojan.Win32.Injector 20151013
Jiangmin Backdoor/DarkKomet.prj 20151012
K7AntiVirus Trojan ( 004c13061 ) 20151013
K7GW Trojan ( 004c13061 ) 20151013
Kaspersky Backdoor.Win32.DarkKomet.fgzk 20151013
McAfee Artemis!63753079DC6A 20151013
McAfee-GW-Edition BehavesLike.Win32.Worm.th 20151013
MicroWorld-eScan Gen:Variant.Symmi.48626 20151013
Microsoft VirTool:Win32/Obfuscator.ALK 20151013
NANO-Antivirus Trojan.Win32.DarkKomet.drhfds 20151013
Panda Trj/Genetic.gen 20151012
Qihoo-360 Win32/Backdoor.8f2 20151013
Sophos Troj/DarkCome-B 20151013
Symantec Trojan.Gen 20151012
Tencent Win32.Backdoor.Darkkomet.Wnmj 20151013
TrendMicro TROJ_GEN.R021C0DED15 20151013
VBA32 Backdoor.DarkKomet 20151012
VIPRE Trojan.Win32.Generic!BT 20151013
ViRobot Backdoor.Win32.S.Agent.1352704[h] 20151013
Zillya Backdoor.DarkKomet.Win32.30321 20151012

Dicha version del ELISTARA 33.12 que lo detecta y elimina, ya está disponible en nuestra web

saludos

ms, 15-10-2015