Mas variantes de PinkSlipBot ya controlados por VirusScan 8.7 actualizado como por el ELISTARA actual:

Nuevas muestras de variantes del PinkSlibBot ya resultan contrioladas tanto por el VirusScan >8.7 como por el ELISTARA actual:

Los nuevos upate de dicho virus, en dos ordenadores diferentes, nos ofrecen estas 4 muestras (de EXE y DLL)

File name: gsauxqi8-24-2.exe
Submission date: 2011-02-24 16:09:15 (UTC)
Current status: queued queued analysing finished
Result: 19/ 43 (44.2%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.02.24.01 2011.02.24 Win-Trojan/Fakeav.249344.BZ
AntiVir 7.11.3.213 2011.02.24 TR/Spy.249344.20
Antiy-AVL 2.0.3.7 2011.02.23 –
Avast 4.8.1351.0 2011.02.23 –
Avast5 5.0.677.0 2011.02.23 –
AVG 10.0.0.1190 2011.02.24 SHeur3.BPQB
BitDefender 7.2 2011.02.24 Gen:Trojan.Heur.pmKfrPk@9Sgcb
CAT-QuickHeal 11.00 2011.02.24 –
ClamAV 0.96.4.0 2011.02.24 –
Commtouch 5.2.11.5 2011.02.24 –
Comodo 7795 2011.02.24 –
DrWeb 5.0.2.03300 2011.02.24 –
Emsisoft 5.1.0.2 2011.02.24 Trojan-PWS.Win32.Qbot!IK
eSafe 7.0.17.0 2011.02.24 –
eTrust-Vet 36.1.8181 2011.02.24 –
F-Prot 4.6.2.117 2011.02.24 –
F-Secure 9.0.16160.0 2011.02.24 Gen:Trojan.Heur.pmKfrPk@9Sgcb
Fortinet 4.2.254.0 2011.02.24 –
GData 21 2011.02.24 Gen:Trojan.Heur.pmKfrPk@9Sgcb
Ikarus T3.1.1.97.0 2011.02.24 Trojan-PWS.Win32.Qbot
Jiangmin 13.0.900 2011.02.24 –
K7AntiVirus 9.90.3949 2011.02.24 Trojan
Kaspersky 7.0.0.125 2011.02.24 Trojan-PSW.Win32.Qbot.byy
McAfee 5.400.0.1158 2011.02.24 Generic.dx!wdl
McAfee-GW-Edition 2010.1C 2011.02.24 Artemis!78415F430F79
Microsoft 1.6603 2011.02.24 Backdoor:Win32/Qakbot.gen!B
NOD32 5904 2011.02.24 a variant of Win32/Kryptik.LAN
Norman 6.07.03 2011.02.24 –
nProtect 2011-02-10.01 2011.02.15 –
Panda 10.0.3.5 2011.02.23 –
PCTools 7.0.3.5 2011.02.24 Malware.Qakbot!rem
Prevx 3.0 2011.02.24 –
Rising 23.46.03.06 2011.02.24 –
Sophos 4.61.0 2011.02.24 –
SUPERAntiSpyware 4.40.0.1006 2011.02.24 –
Symantec 20101.3.0.103 2011.02.24 W32.Qakbot
TheHacker 6.7.0.1.137 2011.02.24 –
TrendMicro 9.200.0.1012 2011.02.24 TSPY_SPYEYE.SMAE
TrendMicro-HouseCall 9.200.0.1012 2011.02.24 TSPY_SPYEYE.SMAE
VBA32 3.12.14.3 2011.02.23 –
VIPRE 8523 2011.02.24 Trojan.Win32.Generic!BT
ViRobot 2011.2.24.4327 2011.02.24 –
VirusBuster 13.6.219.0 2011.02.24 –
Additional informationShow all
MD5   : 78415f430f79382ac9dd377b806c52be
SHA1  : f6b1d472eae28ce16a5c3d7dede92184cf8e1424

File size : 249344 bytes

publisher….: Pmfludbvyn Epmbe
copyright….: Copyright (c) Pmfludbvyn Epmbe 1998-2011
product……: Pmfludbvyn Teigwx Uexwsqnder
description..: Pmfludbvyn Teigwx Uexwsqnder
original name: Pmfludbvyn.exe
internal name: Pmfludbvyn
file version.: 39,97,91,3

y la DLL:
File name: gsauxqi8.dll
Submission date: 2011-02-24 16:27:28 (UTC)
Current status: queued (#2) queued analysing finished
Result: 14/ 43 (32.6%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.02.24.01 2011.02.24 –
AntiVir 7.11.3.213 2011.02.24 BDS/Qakbot.A
Antiy-AVL 2.0.3.7 2011.02.23 –
Avast 4.8.1351.0 2011.02.23 –
Avast5 5.0.677.0 2011.02.23 –
AVG 10.0.0.1190 2011.02.24 Generic3_c.AVBV
BitDefender 7.2 2011.02.24 Trojan.Generic.KDV.140769
CAT-QuickHeal 11.00 2011.02.24 –
ClamAV 0.96.4.0 2011.02.24 –
Commtouch 5.2.11.5 2011.02.24 –
Comodo 7795 2011.02.24 –
DrWeb 5.0.2.03300 2011.02.24 –
Emsisoft 5.1.0.2 2011.02.24 –
eSafe 7.0.17.0 2011.02.24 –
eTrust-Vet 36.1.8181 2011.02.24 –
F-Prot 4.6.2.117 2011.02.24 –
F-Secure 9.0.16160.0 2011.02.24 –
Fortinet 4.2.254.0 2011.02.24 –
GData 21 2011.02.24 Trojan.Generic.KDV.140769
Ikarus T3.1.1.97.0 2011.02.24 Trojan-PWS.Win32.Qbot
Jiangmin 13.0.900 2011.02.24 –
K7AntiVirus 9.90.3949 2011.02.24 –
Kaspersky 7.0.0.125 2011.02.24 Trojan-PSW.Win32.Qbot.byx
McAfee 5.400.0.1158 2011.02.24 Generic.bfr!n
McAfee-GW-Edition 2010.1C 2011.02.24 Artemis!029CED87821B
Microsoft 1.6603 2011.02.24 Backdoor:Win32/Qakbot.gen!B
NOD32 5904 2011.02.24 –
Norman 6.07.03 2011.02.24 –
nProtect 2011-02-10.01 2011.02.15 –
Panda 10.0.3.5 2011.02.23 Suspicious file
PCTools 7.0.3.5 2011.02.24 Malware.Qakbot!rem
Prevx 3.0 2011.02.24 Medium Risk Malware
Rising 23.46.03.06 2011.02.24 –
Sophos 4.61.0 2011.02.24 –
SUPERAntiSpyware 4.40.0.1006 2011.02.24 –
Symantec 20101.3.0.103 2011.02.24 W32.Qakbot
TheHacker 6.7.0.1.137 2011.02.24 –
TrendMicro 9.200.0.1012 2011.02.24 –
TrendMicro-HouseCall 9.200.0.1012 2011.02.24 –
VBA32 3.12.14.3 2011.02.23 –
VIPRE 8523 2011.02.24 Trojan.Win32.Generic!BT
ViRobot 2011.2.24.4327 2011.02.24 –
VirusBuster 13.6.219.0 2011.02.24 –
Additional informationShow all
MD5   : 029ced87821bf90007a9f5e1c366bbbe
SHA1  : ec36faabd0cdff8b5a7ebe234d5b7573c7ccabcc
File size : 135216 bytes

publisher….: Rlorivwnp Vqhoyc
copyright….: Copyright (c) Rlorivwnp Vqhoyc 1996-2009
product……: Rlorivwnp Kywbk Bnkpugs
description..: Rlorivwnp Kywbk Bnkpugs
original name: Rlorivwnp.exe
internal name: Rlorivwnp
file version.: 13,127,51,36

Y DE OTRO ORDENADOR:
File name: ibwzya1-24-2.exe
Submission date: 2011-02-24 16:16:55 (UTC)
Current status: queued (#7) queued analysing finished
Result: 20/ 43 (46.5%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.02.24.01 2011.02.24 Win-Trojan/Fakeav.249344.BZ
AntiVir 7.11.3.213 2011.02.24 TR/Spy.249344.20
Antiy-AVL 2.0.3.7 2011.02.23 –
Avast 4.8.1351.0 2011.02.23 –
Avast5 5.0.677.0 2011.02.23 –
AVG 10.0.0.1190 2011.02.24 SHeur3.BPQB
BitDefender 7.2 2011.02.24 Gen:Trojan.Heur.pmKfrPk@9Sgcb
CAT-QuickHeal 11.00 2011.02.24 –
ClamAV 0.96.4.0 2011.02.24 –
Commtouch 5.2.11.5 2011.02.24 –
Comodo 7795 2011.02.24 –
DrWeb 5.0.2.03300 2011.02.24 –
Emsisoft 5.1.0.2 2011.02.24 Trojan-PWS.Win32.Qbot!IK
eSafe 7.0.17.0 2011.02.24 –
eTrust-Vet 36.1.8181 2011.02.24 –
F-Prot 4.6.2.117 2011.02.24 –
F-Secure 9.0.16160.0 2011.02.24 Gen:Trojan.Heur.pmKfrPk@9Sgcb
Fortinet 4.2.254.0 2011.02.24 –
GData 21 2011.02.24 Gen:Trojan.Heur.pmKfrPk@9Sgcb
Ikarus T3.1.1.97.0 2011.02.24 Trojan-PWS.Win32.Qbot
Jiangmin 13.0.900 2011.02.24 –
K7AntiVirus 9.90.3949 2011.02.24 Trojan
Kaspersky 7.0.0.125 2011.02.24 Trojan-PSW.Win32.Qbot.byy
McAfee 5.400.0.1158 2011.02.24 Generic.dx!wdl
McAfee-GW-Edition 2010.1C 2011.02.24 Artemis!78415F430F79
Microsoft 1.6603 2011.02.24 Backdoor:Win32/Qakbot.gen!B
NOD32 5904 2011.02.24 a variant of Win32/Kryptik.LAN
Norman 6.07.03 2011.02.24 –
nProtect 2011-02-10.01 2011.02.15 –
Panda 10.0.3.5 2011.02.23 W32/P2PWorm.HO.worm
PCTools 7.0.3.5 2011.02.24 Malware.Qakbot!rem
Prevx 3.0 2011.02.24 –
Rising 23.46.03.06 2011.02.24 –
Sophos 4.61.0 2011.02.24 –
SUPERAntiSpyware 4.40.0.1006 2011.02.24 –
Symantec 20101.3.0.103 2011.02.24 W32.Qakbot
TheHacker 6.7.0.1.137 2011.02.24 –
TrendMicro 9.200.0.1012 2011.02.24 TSPY_SPYEYE.SMAE
TrendMicro-HouseCall 9.200.0.1012 2011.02.24 TSPY_SPYEYE.SMAE
VBA32 3.12.14.3 2011.02.23 –
VIPRE 8523 2011.02.24 Trojan.Win32.Generic!BT
ViRobot 2011.2.24.4327 2011.02.24 –
VirusBuster 13.6.219.0 2011.02.24 –
Additional informationShow all
MD5   : 78415f430f79382ac9dd377b806c52be
SHA1  : f6b1d472eae28ce16a5c3d7dede92184cf8e1424
File size : 249344 bytes
publisher….: Pmfludbvyn Epmbe
copyright….: Copyright (c) Pmfludbvyn Epmbe 1998-2011
product……: Pmfludbvyn Teigwx Uexwsqnder
description..: Pmfludbvyn Teigwx Uexwsqnder
original name: Pmfludbvyn.exe
internal name: Pmfludbvyn
file version.: 39,97,91,3

y la DLL:

File name: ibwzya1-24-2.dll
Submission date: 2011-02-24 16:22:24 (UTC)
Result: 13/ 43 (30.2%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.02.24.01 2011.02.24 –
AntiVir 7.11.3.213 2011.02.24 BDS/Qakbot.A
Antiy-AVL 2.0.3.7 2011.02.23 –
Avast 4.8.1351.0 2011.02.23 –
Avast5 5.0.677.0 2011.02.23 –
AVG 10.0.0.1190 2011.02.24 Generic3_c.AVBV
BitDefender 7.2 2011.02.24 Trojan.Generic.KDV.140769
CAT-QuickHeal 11.00 2011.02.24 –
ClamAV 0.96.4.0 2011.02.24 –
Commtouch 5.2.11.5 2011.02.24 –
Comodo 7795 2011.02.24 –
DrWeb 5.0.2.03300 2011.02.24 –
Emsisoft 5.1.0.2 2011.02.24 –
eSafe 7.0.17.0 2011.02.24 –
eTrust-Vet 36.1.8181 2011.02.24 –
F-Prot 4.6.2.117 2011.02.24 –
F-Secure 9.0.16160.0 2011.02.24 –
Fortinet 4.2.254.0 2011.02.24 –
GData 21 2011.02.24 Trojan.Generic.KDV.140769
Ikarus T3.1.1.97.0 2011.02.24 Trojan-PWS.Win32.Qbot
Jiangmin 13.0.900 2011.02.24 –
K7AntiVirus 9.90.3949 2011.02.24 –
Kaspersky 7.0.0.125 2011.02.24 Trojan-PSW.Win32.Qbot.byx
McAfee 5.400.0.1158 2011.02.24 Generic.bfr!n
McAfee-GW-Edition 2010.1C 2011.02.24 Artemis!029CED87821B
Microsoft 1.6603 2011.02.24 Backdoor:Win32/Qakbot.gen!B
NOD32 5904 2011.02.24 –
Norman 6.07.03 2011.02.24 –
nProtect 2011-02-10.01 2011.02.15 –
Panda 10.0.3.5 2011.02.23 –
PCTools 7.0.3.5 2011.02.24 Malware.Qakbot!rem
Prevx 3.0 2011.02.24 Medium Risk Malware
Rising 23.46.03.06 2011.02.24 –
Sophos 4.61.0 2011.02.24 –
SUPERAntiSpyware 4.40.0.1006 2011.02.24 –
Symantec 20101.3.0.103 2011.02.24 W32.Qakbot
TheHacker 6.7.0.1.137 2011.02.24 –
TrendMicro 9.200.0.1012 2011.02.24 –
TrendMicro-HouseCall 9.200.0.1012 2011.02.24 –
VBA32 3.12.14.3 2011.02.23 –
VIPRE 8523 2011.02.24 Trojan.Win32.Generic!BT
ViRobot 2011.2.24.4327 2011.02.24 –
VirusBuster 13.6.219.0 2011.02.24 –
Additional informationShow all
MD5   : 029ced87821bf90007a9f5e1c366bbbe
SHA1  : ec36faabd0cdff8b5a7ebe234d5b7573c7ccabcc

File size : 135216 bytes

publisher….: Rlorivwnp Vqhoyc
copyright….: Copyright (c) Rlorivwnp Vqhoyc 1996-2009
product……: Rlorivwnp Kywbk Bnkpugs
description..: Rlorivwnp Kywbk Bnkpugs
original name: Rlorivwnp.exe
internal name: Rlorivwnp
file version.: 13,127,51,36

Cabe indicar que siempre, a pesar de que sean nuevas variantes, en el mismo ordenaodr se generan fichero EXE y DLL con el mismo nombre, bien en su disco duro como en los pendrives que se insertan en él.
cOMO VEMOS, AMBOS SON DETECTADOS POR EL ACTUAL vIRUSsCAN y por el ELISTARA de hoy 22.69, por lo que parece que las nuevas variantes de este malware estan siendo totalmente controladas .
Con ello ya cerramos la incidencia de dicho PINKSLIPBOT, bien con el VirusScan > 8.7 como con el ELISTARA que lo complementa.

saludos

ms, 24-2-2011