Tres muestras del NETWORM KOOBFACE pasados a controlar a partir de ELISTARA 23.92

(KOOBFACE = nombre derivado de FACE BOOK inverso)

Se han recibido tres muestras distintas de dicho KOOBFACE que pasamosm a controlar a partir del ELISTARA 23.92 de hoy
El analisis de Virus Total de cada una de ellas es:

File name: .sys.php
Submission date: 2011-09-21 14:07:53 (UTC)
Current status: finished
Result: 29 /44 (65.9%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.09.21.01 2011.09.21 Worm/Win32.Koobface
AntiVir 7.11.15.0 2011.09.21 Worm/Koobface.AW.2
Antiy-AVL 2.0.3.7 2011.09.21 –
Avast 4.8.1351.0 2011.09.18 Win32:Downloader-JBQ [Trj]
Avast5 5.0.677.0 2011.09.18 Win32:Downloader-JBQ [Trj]
AVG 10.0.0.1190 2011.09.21 –
BitDefender 7.2 2011.09.21 Gen:Trojan.Heur.RP.emGfaq8sJyn
ByteHero 1.0.0.1 2011.09.13 –
CAT-QuickHeal 11.00 2011.09.21 Worm.Koobface.aw
ClamAV 0.97.0.0 2011.09.21 –
Commtouch 5.3.2.6 2011.09.21 –
Comodo 10190 2011.09.21 TrojWare.Win32.Agent.tmbl
DrWeb 5.0.2.03300 2011.09.21 –
Emsisoft 5.1.0.11 2011.09.21 Worm.Win32.Koobface!IK
eSafe 7.0.17.0 2011.09.20 Win32.GenHeur.RP.Emg
eTrust-Vet 36.1.8573 2011.09.21 –
F-Prot 4.6.2.117 2011.09.21 –
F-Secure 9.0.16440.0 2011.09.21 Gen:Trojan.Heur.RP.emGfaq8sJyn
Fortinet 4.3.370.0 2011.09.21 W32/Dx.B2SN!tr
GData 22 2011.09.21 Gen:Trojan.Heur.RP.emGfaq8sJyn
Ikarus T3.1.1.107.0 2011.09.21 Worm.Win32.Koobface
Jiangmin 13.0.900 2011.09.21 Trojan/JboxGeneric.bdm
K7AntiVirus 9.113.5168 2011.09.20 –
Kaspersky 9.0.0.837 2011.09.21 Net-Worm.Win32.Koobface.jsl
McAfee 5.400.0.1158 2011.09.21 Generic.dx!b2sn
McAfee-GW-Edition 2010.1D 2011.09.21 Generic.dx!b2sn
Microsoft 1.7604 2011.09.21 Worm:Win32/Koobface.AW
NOD32 6481 2011.09.21 probably a variant of Win32/Spammer.Agent.L
Norman 6.07.11 2011.09.21 W32/Suspicious_Gen2.QNXKW
nProtect 2011-09-21.02 2011.09.21 –
Panda 10.0.3.5 2011.09.20 Trj/CI.A
PCTools 8.0.0.5 2011.09.21 Trojan.Gen
Prevx 3.0 2011.09.21 –
Rising 23.76.02.03 2011.09.21 Suspicious
Sophos 4.69.0 2011.09.21 –
SUPERAntiSpyware 4.40.0.1006 2011.09.21 Trojan.Dropper/Gen-PHP
Symantec 20111.2.0.82 2011.09.21 Trojan.Gen.2
TheHacker 6.7.0.1.303 2011.09.21 –
TrendMicro 9.500.0.1008 2011.09.21 PAK_Generic.001
TrendMicro-HouseCall 9.500.0.1008 2011.09.21 WORM_KOOBFACE.FQ
VBA32 3.12.16.4 2011.09.21 –
VIPRE 10541 2011.09.21 Trojan.Win32.Generic!BT
ViRobot 2011.9.21.4681 2011.09.21 –
VirusBuster 14.0.223.0 2011.09.20 Trojan.Spammer!dnyq/yHq3yY
Additional informationShow all
MD5   : 49a4f330f2e086151781a6d2f08a7062
SHA1  : 162ea87e2c2c954f1ede965a8a65dbc10c9b8dc5

File size : 73216 bytes

_________
File name: 1316609078.setup.exe
Submission date: 2011-09-21 12:47:09 (UTC)
Current status: finished
Result: 36 /44 (81.8%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.09.21.01 2011.09.21 Trojan/Win32.Jorik
AntiVir 7.11.14.255 2011.09.21 Worm/Koobface.AW
Antiy-AVL 2.0.3.7 2011.09.21 Trojan/Win32.Jorik.gen
Avast 4.8.1351.0 2011.09.18 Win32:Downloader-JEK [Trj]
Avast5 5.0.677.0 2011.09.18 Win32:Downloader-JEK [Trj]
AVG 10.0.0.1190 2011.09.21 BackDoor.Generic_r.VI
BitDefender 7.2 2011.09.21 Trojan.Generic.6522119
ByteHero 1.0.0.1 2011.09.13 –
CAT-QuickHeal 11.00 2011.09.21 Trojan.Jorik.Koobface.bp
ClamAV 0.97.0.0 2011.09.21 –
Commtouch 5.3.2.6 2011.09.21 –
Comodo 10190 2011.09.21 TrojWare.Win32.Agent.tmbl
DrWeb 5.0.2.03300 2011.09.21 Win32.HLLW.Autoruner.58941
Emsisoft 5.1.0.11 2011.09.21 Worm.Win32.Koobface!IK
eSafe 7.0.17.0 2011.09.20 Win32.GenHeur.JP.Dmk
eTrust-Vet 36.1.8573 2011.09.21 –
F-Prot 4.6.2.117 2011.09.21 –
F-Secure 9.0.16440.0 2011.09.21 Trojan.Generic.6522119
Fortinet 4.3.370.0 2011.09.21 W32/Jorik_Koobface.BP!tr
GData 22 2011.09.21 Trojan.Generic.6522119
Ikarus T3.1.1.107.0 2011.09.21 Worm.Win32.Koobface
Jiangmin 13.0.900 2011.09.20 Trojan/Jorik.nci
K7AntiVirus 9.113.5168 2011.09.20 –
Kaspersky 9.0.0.837 2011.09.21 Trojan.Win32.Jorik.Koobface.bp
McAfee 5.400.0.1158 2011.09.21 W32/Koobface.worm.gen.bi
McAfee-GW-Edition 2010.1D 2011.09.21 Downloader.a!hf
Microsoft 1.7604 2011.09.21 Worm:Win32/Koobface.AW
NOD32 6481 2011.09.21 probably a variant of Win32/TrojanDownloader.Agent
.QPX
Norman 6.07.11 2011.09.21 W32/Suspicious_Gen2.PSRUA
nProtect 2011-09-21.02 2011.09.21 Trojan/W32.Jorik.50688.B
Panda 10.0.3.5 2011.09.20 Generic Trojan
PCTools 8.0.0.5 2011.09.21 Trojan.Generic
Prevx 3.0 2011.09.21 –
Rising 23.76.02.03 2011.09.21 Trojan.Win32.Generic.128FD0A5
Sophos 4.69.0 2011.09.21 Mal/Generic-L
SUPERAntiSpyware 4.40.0.1006 2011.09.21 Trojan.Agent/Gen-MSFake
Symantec 20111.2.0.82 2011.09.21 Trojan Horse
TheHacker 6.7.0.1.303 2011.09.21 Trojan/Jorik.Koobface.bp
TrendMicro 9.500.0.1008 2011.09.21 WORM_KOOBFCE.ABL
TrendMicro-HouseCall 9.500.0.1008 2011.09.21 WORM_KOOBFCE.ABL
VBA32 3.12.16.4 2011.09.21 Trojan.Jorik.Koobface.bp
VIPRE 10541 2011.09.21 Trojan.Win32.Generic!BT
ViRobot 2011.9.21.4681 2011.09.21 –
VirusBuster 14.0.223.0 2011.09.20 Trojan.DL.Agent!mRY2oToymDM
Additional informationShow all
MD5   : 60744cf27da64a5a16c013ccf3194c52
SHA1  : 1be9bac9033ea1de2553051b15e875367ce70773

File size : 50688 bytes

publisher….: Windows Service
copyright….: Copyright (C) 2011
product……: Windows Service
description..: Windows Service
original name: n/a
internal name: Notify
file version.: 1.0.0.1
_______________

File name: 1316609080.tumreg.1.exe
Submission date: 2011-09-21 12:47:08 (UTC)
Current status: finished
Result: 34 /44 (77.3%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.09.21.01 2011.09.21 Win32/Koobface.worm.70144.C
AntiVir 7.11.14.255 2011.09.21 TR/Spy.Gen
Antiy-AVL 2.0.3.7 2011.09.21 Trojan/win32.agent.gen
Avast 4.8.1351.0 2011.09.18 Win32:Downloader-JBQ [Trj]
Avast5 5.0.677.0 2011.09.18 Win32:Downloader-JBQ [Trj]
AVG 10.0.0.1190 2011.09.21 BackDoor.Generic_r.UP
BitDefender 7.2 2011.09.21 Gen:Trojan.Heur.RP.emGfaGCqEOo
ByteHero 1.0.0.1 2011.09.13 –
CAT-QuickHeal 11.00 2011.09.21 Worm.Koobface.av
ClamAV 0.97.0.0 2011.09.21 –
Commtouch 5.3.2.6 2011.09.21 –
Comodo 10190 2011.09.21 UnclassifiedMalware
DrWeb 5.0.2.03300 2011.09.21 Trojan.DownLoader4.31127
Emsisoft 5.1.0.11 2011.09.21 Worm.Win32.Koobface!IK
eSafe 7.0.17.0 2011.09.20 –
eTrust-Vet 36.1.8573 2011.09.21 –
F-Prot 4.6.2.117 2011.09.21 –
F-Secure 9.0.16440.0 2011.09.21 Gen:Trojan.Heur.RP.emGfaGCqEOo
Fortinet 4.3.370.0 2011.09.21 W32/KOOBFACE.AV!worm
GData 22 2011.09.21 Gen:Trojan.Heur.RP.emGfaGCqEOo
Ikarus T3.1.1.107.0 2011.09.21 Worm.Win32.Koobface
Jiangmin 13.0.900 2011.09.20 Trojan/Generic.jtpv
K7AntiVirus 9.113.5168 2011.09.20 Riskware
Kaspersky 9.0.0.837 2011.09.21 HEUR:Trojan.Win32.Generic
McAfee 5.400.0.1158 2011.09.21 Generic.dx!bamj
McAfee-GW-Edition 2010.1D 2011.09.21 Generic.dx!bamj
Microsoft 1.7604 2011.09.21 Worm:Win32/Koobface.AV
NOD32 6481 2011.09.21 a variant of Win32/Spammer.Agent.K
Norman 6.07.11 2011.09.21 W32/Suspicious_Gen2.NYRHI
nProtect 2011-09-21.02 2011.09.21 Trojan/W32.Agent.70144.PE
Panda 10.0.3.5 2011.09.20 Generic Worm
PCTools 8.0.0.5 2011.09.21 Downloader.Generic
Prevx 3.0 2011.09.21 –
Rising 23.76.02.03 2011.09.21 Trojan.Win32.Generic.128C6D84
Sophos 4.69.0 2011.09.21 Mal/Generic-L
SUPERAntiSpyware 4.40.0.1006 2011.09.21 –
Symantec 20111.2.0.82 2011.09.21 Downloader
TheHacker 6.7.0.1.303 2011.09.21 Trojan/Spammer.Agent.k
TrendMicro 9.500.0.1008 2011.09.21 WORM_KOOBFACE.AV
TrendMicro-HouseCall 9.500.0.1008 2011.09.21 WORM_KOOBFACE.AV
VBA32 3.12.16.4 2011.09.21 –
VIPRE 10541 2011.09.21 Worm.Win32.Koobface.av (v)
ViRobot 2011.9.21.4681 2011.09.21 –
VirusBuster 14.0.223.0 2011.09.20 Worm.Koobface!WLQETyincqc
Additional informationShow all
MD5   : 2736d06fe3ac72f583b29f5bbcf95399
SHA1  : 5139a27e2bbaed8b67428cddcc1ac165b50eb47d

File size : 70144 bytes
Dicho ELISTARA 23.92 que las detecta y elimina, estará disponible en nuestra web a partir de l9 h. CEST de hoy

saludos

ms, 21-9-2011