Nueva gama de malwares: MSPOSER – Aun detectado por pocos AV (20 de 43)

Siguiendo la nomenclatura de MICROSOFT, pasamos a identificar este nuevo malware como MSPOSER:
File name: AHEADZ.EXE.Muestra EliStartPage v22.49
Submission date: 2011-01-31 10:52:31 (UTC)
Current status: finished
Result: 20 /43 (46.5%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.27.01 2011.01.27 –
AntiVir 7.11.2.34 2011.01.31 TR/Crypt.FKM.Gen
Antiy-AVL 2.0.3.7 2011.01.28 –
Avast 4.8.1351.0 2011.01.30 –
Avast5 5.0.677.0 2011.01.30 –
AVG 10.0.0.1190 2011.01.31 –
BitDefender 7.2 2011.01.31 Gen:Trojan.Heur.VB.bmKfcKDifEmi
CAT-QuickHeal 11.00 2011.01.31 –
ClamAV 0.96.4.0 2011.01.30 Suspect.Trojan.Generic.FD-1
Commtouch 5.2.11.5 2011.01.31 W32/VBTrojan.17D2!Maximus
Comodo 7550 2011.01.31 –
DrWeb 5.0.2.03300 2011.01.31 Trojan.Siggen2.11213
Emsisoft 5.1.0.1 2011.01.31 Trojan-Downloader.Win32.Banload!IK
eSafe 7.0.17.0 2011.01.30 –
eTrust-Vet 36.1.8129 2011.01.31 –
F-Prot 4.6.2.117 2011.01.30 W32/VBTrojan.17D2!Maximus
F-Secure 9.0.16160.0 2011.01.31 Gen:Trojan.Heur.VB.bmKfcKDifEmi
Fortinet 4.2.254.0 2011.01.31 –
GData 21 2011.01.31 Gen:Trojan.Heur.VB.bmKfcKDifEmi
Ikarus T3.1.1.97.0 2011.01.31 Trojan-Downloader.Win32.Banload
Jiangmin 13.0.900 2011.01.31 –
K7AntiVirus 9.78.3690 2011.01.31 Trojan
Kaspersky 7.0.0.125 2011.01.31 –
McAfee 5.400.0.1158 2011.01.31 –
McAfee-GW-Edition 2010.1C 2011.01.31 Heuristic.LooksLike.Win32.Suspicious.J
Microsoft 1.6502 2011.01.31 Trojan:Win32/Msposer.A
NOD32 5833 2011.01.31 probably a variant of Win32/VB.PLQ
Norman 6.06.12 2011.01.30 W32/Obfuscated.A2!genr
nProtect 2011-01-31.01 2011.01.31 –
Panda 10.0.3.5 2011.01.30 –
PCTools 7.0.3.5 2011.01.29 Trojan.Gen
Prevx 3.0 2011.01.31 –
Rising 23.43.00.02 2011.01.31 –
Sophos 4.61.0 2011.01.31 Sus/Behav-1021
SUPERAntiSpyware 4.40.0.1006 2011.01.30 Adware.Vundo/Variant-MSFake
Symantec 20101.3.0.103 2011.01.31 Trojan.Gen
TheHacker 6.7.0.1.122 2011.01.30 –
TrendMicro 9.120.0.1004 2011.01.31 –
TrendMicro-HouseCall 9.120.0.1004 2011.01.31 –
VBA32 3.12.14.3 2011.01.31 –
VIPRE 8260 2011.01.31 Trojan.Win32.Generic.pak!cobra
ViRobot 2011.1.31.4284 2011.01.31 –
VirusBuster 13.6.172.2 2011.01.30 –
Additional informationShow all
MD5   : 5c9de5c7c1b00c7cc870299f6ba3fef8
SHA1  : 3489c94469e828785b5f6ccc28e27fedf2d60269

File size : 28672 bytes

publisher….: Microsoft
copyright….: n/a
product……: SmartOne
description..: n/a
original name: xseg.exe
internal name: xseg
file version.: 5.00.0036

a PARTIR DE LA VERSION 22.50 del ELISTARA de hoy, que estara disponible en nuestra web desde las 19 h de esta tarde, se controlará y eliminará este nuevo malware.

saludos

ms, 31-1-2011