Nueva variante de TROJAN AGENT.ABUE

Una nueva muestra sospechosa cazada por la heuristica del ELISTARA, ha sido analizada y pasada a controlar especificamente como TROJAN AGENT.ABUE a partir del ELISTARA 22.51 de hoy

File name: SERVICE.EXE.Muestra EliStartPage v19.55
Submission date: 2011-02-01 08:38:27 (UTC)
Current status: finished
Result: 39 /43 (90.7%)
VT Community

not reviewed
Safety score: –
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.27.01 2011.01.27 Trojan/Win32.Buzus
AntiVir 7.11.2.39 2011.01.31 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2011.01.28 Trojan/Win32.Buzus.gen
Avast 4.8.1351.0 2011.01.31 Win32:Rootkit-gen
Avast5 5.0.677.0 2011.01.31 Win32:Rootkit-gen
AVG 10.0.0.1190 2011.02.01 Crypt.LAU
BitDefender 7.2 2011.02.01 Trojan.Agent.AOAX
CAT-QuickHeal 11.00 2011.02.01 Trojan.Buzus.ctzq
ClamAV 0.96.4.0 2011.02.01 –
Commtouch 5.2.11.5 2011.02.01 W32/Trojan2.LFFP
Comodo 7559 2011.01.31 TrojWare.Win32.VBInject.IK
DrWeb 5.0.2.03300 2011.02.01 Trojan.MulDrop.53978
Emsisoft 5.1.0.1 2011.02.01 Trojan.Win32.Buzus!IK
eSafe 7.0.17.0 2011.01.31 Win32.VirToolVBInjec
eTrust-Vet 36.1.8132 2011.02.01 –
F-Prot 4.6.2.117 2011.01.31 W32/Trojan2.LFFP
F-Secure 9.0.16160.0 2011.02.01 Trojan.Agent.AOAX
Fortinet 4.2.254.0 2011.02.01 W32/Kolab.HQL!worm
GData 21 2011.02.01 Trojan.Agent.AOAX
Ikarus T3.1.1.97.0 2011.02.01 Trojan.Win32.Buzus
Jiangmin 13.0.900 2011.02.01 Trojan/Buzus.wfw
K7AntiVirus 9.79.3702 2011.02.01 Trojan
Kaspersky 7.0.0.125 2011.02.01 Trojan.Win32.Buzus.ctzq
McAfee 5.400.0.1158 2011.02.01 W32/Pepa.worm
McAfee-GW-Edition 2010.1C 2011.01.31 W32/Pepa.worm
Microsoft 1.6502 2011.02.01 VirTool:Win32/VBInject.gen!CU
NOD32 5835 2011.01.31 a variant of Win32/Injector.ANQ
Norman 6.06.12 2011.01.31 W32/VBTroj.CEPA
nProtect 2011-01-31.01 2011.01.31 Trojan/W32.Buzus.217088.AF
Panda 10.0.3.5 2011.01.31 Generic Trojan
PCTools 7.0.3.5 2011.01.31 Malware.Rixobot
Prevx 3.0 2011.02.01 Medium Risk Malware
Rising 23.43.01.00 2011.02.01 Trojan.Win32.Generic.11F069E4
Sophos 4.61.0 2011.02.01 Mal/Nyrate-A
SUPERAntiSpyware 4.40.0.1006 2011.02.01 –
Symantec 20101.3.0.103 2011.02.01 W32.Rixobot
TheHacker 6.7.0.1.122 2011.01.30 –
TrendMicro 9.120.0.1004 2011.02.01 TROJ_Gen.CZ33G5
TrendMicro-HouseCall 9.120.0.1004 2011.02.01 TROJ_Gen.CZ33G5
VBA32 3.12.14.3 2011.01.31 Trojan.Win32.Buzus.ctzq
VIPRE 8271 2011.02.01 Trojan.Win32.Generic!BT
ViRobot 2011.2.1.4285 2011.02.01 Trojan.Win32.Buzus.217088.H
VirusBuster 13.6.174.0 2011.01.31 Trojan.Injector!fWcROfI4OHQ
Additional informationShow all
MD5   : 7153c631b03b47ac93d8f46173e15c3c
SHA1  : dd04ceb92909180ab975a95c32201aaba9060f21
SHA256: 165ca37425a30d3d177f07136cfa7b9655fe6c65d6fd7ada0c24e3ffaf33ccd3
ssdeep: 3072:ITPXblvk8ek7XK32NdaskK/c5zvq+/vZpmeR1m0bIX45hv1PR8pRB:MPXbl88eua3ud3c5
eSvZX0I5hNPOR
File size : 217088 bytes
First seen: 2009-12-16 08:48:48
Last seen : 2011-02-01 08:38:27
Magic: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
TrID:
Win32 Executable Microsoft Visual Basic 6 (90.9%)
Win32 Executable Generic (6.1%)
Generic Win/DOS Executable (1.4%)
DOS Executable Generic (1.4%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher….:
copyright….: n/a
product……: Project1
description..: n/a
original name: Project2.exe
internal name: Project2
file version.: 1.00

A partir de las 19 h de hoy, el ELISTARA  22.51 estará disponible en nuestra web.

saludos

ms, 1-2-2011