Nueva variante de TROJAN SCAR CEUY en fichero service.exe

Ya hay bastantes malwares que utilizan el nombre de SERVICE.EXE  (por su miliar al services.exe del sistema operativo) para su malware. En este caso es una variante de TROJAN SCAR CEUY, que pasamos a controlar a partir del ELISTARA 22.64

File name: service.exe
Submission date: 2011-01-21 22:37:50 (UTC)
Current status: finished
Result: 39 /41 (95.1%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.18.00 2011.01.17 Trojan/Win32.VBKrypt
AntiVir 7.11.1.216 2011.01.21 TR/Ircbrute.A.91
Antiy-AVL 2.0.3.7 2011.01.18 Trojan/Win32.VBKrypt.gen
Avast 4.8.1351.0 2011.01.21 Win32:VB-QTO
Avast5 5.0.677.0 2011.01.21 Win32:VB-QTO
AVG 10.0.0.1190 2011.01.21 Worm/VB.13.Z
BitDefender 7.2 2011.01.21 Trojan.Generic.5256726
CAT-QuickHeal 11.00 2011.01.21 Trojan.VBKrypt.agkr
ClamAV 0.96.4.0 2011.01.21 BC.Heuristic.Trojan.SusPacked.BF-6.B
Commtouch 5.2.11.5 2011.01.21 W32/MalwareF.TVZL
Comodo 7467 2011.01.21 Heur.Suspicious
DrWeb 5.0.2.03300 2011.01.21 Trojan.DownLoader1.46294
Emsisoft 5.1.0.1 2011.01.21 Trojan.Win32.VBKrypt!IK
eTrust-Vet 36.1.8115 2011.01.21 –
F-Prot 4.6.2.117 2011.01.21 W32/MalwareF.TVZL
F-Secure 9.0.16160.0 2011.01.21 Trojan.Generic.5256726
Fortinet 4.2.254.0 2011.01.21 W32/VB.WL!tr
GData 21 2011.01.21 Trojan.Generic.5256726
Ikarus T3.1.1.97.0 2011.01.21 Trojan.Win32.VBKrypt
Jiangmin 13.0.900 2011.01.21 Trojan/VBKrypt.pbf
K7AntiVirus 9.77.3616 2011.01.21 Riskware
Kaspersky 7.0.0.125 2011.01.21 Trojan.Win32.VBKrypt.agkr
McAfee 5.400.0.1158 2011.01.21 Artemis!382BD7F76189
McAfee-GW-Edition 2010.1C 2011.01.21 Artemis!382BD7F76189
NOD32 5807 2011.01.21 a variant of Win32/Injector.EJU
Norman 6.06.12 2011.01.21 W32/Suspicious_Gen2.GQFQN
nProtect 2011-01-18.01 2011.01.18 Trojan/W32.VBKrypt.94208.O
Panda 10.0.2.7 2011.01.21 Suspicious file
PCTools 7.0.3.5 2011.01.21 Trojan.Gen
Prevx 3.0 2011.01.21 Medium Risk Malware
Rising 23.41.04.06 2011.01.21 Trojan.Win32.Generic.1265471C
Sophos 4.61.0 2011.01.21 Mal/Generic-L
SUPERAntiSpyware 4.40.0.1006 2011.01.21 Trojan.Agent/Gen-Falint[Cont]
Symantec 20101.3.0.103 2011.01.21 Trojan.Gen
TheHacker 6.7.0.1.118 2011.01.21 Trojan/VBKrypt.agkr
TrendMicro 9.120.0.1004 2011.01.21 TROJ_GEN.R01C2LT
TrendMicro-HouseCall 9.120.0.1004 2011.01.21 TROJ_GEN.R01C2LT
VBA32 3.12.14.3 2011.01.21 Trojan.VBKrypt.agkr
VIPRE 8147 2011.01.21 Trojan.Win32.Ircbrute
ViRobot 2011.1.21.4267 2011.01.21 –
VirusBuster 13.6.158.0 2011.01.21 Trojan.VBKrypt!55vtpPLBts8
Additional informationShow all
MD5   : 382bd7f76189d21531ee91c11c331b28
SHA1  : cddc6cf0cc1c6ad34150ba499bf50d7c0961b5db

File size : 94208 bytes

publisher….: DaPimp
copyright….: n/a
product……: Proyecto1
description..: n/a
original name: asdffffffffffffffffffffffffffffffffffffffffffffffffffff.exe
internal name: asdffffffffffffffffffffffffffffffffffffffffffffffffffff
file version.: 1.00

Dicha version del ELISTARA que controla y elimina esta nueva variante, estará disponible en nuestra web a partir de las 15 h CET.

saludos

ms, 18-2-2011