Nueva variante de Swizzor, actualmente poco controlada por los antivirus (34,15 %)

File Move_Ante_Mapi.exe.Muestra_EliMov received on 2009.10.26 09:55:39 (UTC)
Current status: finished

Result: 14/41 (34.15%)
 Compact Print results  Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.10.26 Trojan.Win32.Obfuscated!IK
AhnLab-V3 5.0.0.2 2009.10.23 –
AntiVir 7.9.1.44 2009.10.26 –
Antiy-AVL 2.0.3.7 2009.10.26 –
Authentium 5.1.2.4 2009.10.25 –
Avast 4.8.1351.0 2009.10.25 Win32:SwizBased-gen
AVG 8.5.0.423 2009.10.25 –
BitDefender 7.2 2009.10.26 Trojan.Generic.2594095
CAT-QuickHeal 10.00 2009.10.26 –
ClamAV 0.94.1 2009.10.26 –
Comodo 2737 2009.10.26 –
DrWeb 5.0.0.12182 2009.10.26 Trojan.Swizzor.based
eSafe 7.0.17.0 2009.10.25 –
eTrust-Vet 35.1.7082 2009.10.23 Win32/Swizzor!generic
F-Prot 4.5.1.85 2009.10.25 –
F-Secure 9.0.15370.0 2009.10.22 –
Fortinet 3.120.0.0 2009.10.26 –
GData 19 2009.10.26 Trojan.Generic.2594095
Ikarus T3.1.1.72.0 2009.10.26 Trojan.Win32.Obfuscated
Jiangmin 11.0.800 2009.10.26 –
K7AntiVirus 7.10.879 2009.10.24 –
Kaspersky 7.0.0.125 2009.10.26 –
McAfee 5782 2009.10.25 –
McAfee+Artemis 5782 2009.10.25 Artemis!CB619A6B000B
McAfee-GW-Edition 6.8.5 2009.10.26 –
Microsoft 1.5202 2009.10.26 –
NOD32 4542 2009.10.26 a variant of Win32/TrojanDownloader.Swizzor.NCV
Norman 6.03.02 2009.10.23 W32/Swizzor.FGAM
nProtect 2009.1.8.0 2009.10.26 –
Panda 10.0.2.2 2009.10.25 Trj/CI.A
PCTools 4.4.2.0 2009.10.19 –
Prevx 3.0 2009.10.26 Low Risk Adware
Rising 21.53.02.00 2009.10.26 Trojan.DL.Win32.Swizzor.dtp
Sophos 4.46.0 2009.10.26 –
Sunbelt 3.2.1858.2 2009.10.25 Trojan.Win32.Obfuscated.Gen (v)
Symantec 1.4.4.12 2009.10.26 –
TheHacker 6.5.0.2.053 2009.10.24 –
TrendMicro 8.950.0.1094 2009.10.26 –
VBA32 3.12.10.11 2009.10.23 –
ViRobot 2009.10.26.2005 2009.10.26 –
VirusBuster 4.6.5.0 2009.10.25 –
Additional information
File size: 430080 bytes
MD5   : cb619a6b000b906569159eaab1776308
SHA1  : adad4b7328a1f19dceeea794184e86a4c4d00b3b

Como que aun NO LO CONTROLAN ni AVG, ni F-Prot, ni Kaspersky, ni Microsoft, ni Sophos ni Symantec, ni Trend, de entre algunos antivirus conocidos, es fácil que se propague facilmente

A partir del ELISTARA de hoy, 19.53, ya lo controlará y eliminará.

 saludos

ms, 26-0-2009