Variante de BREDOLAB cazado por la heuristica del ELISTARA

Un muestra pedida por el ELISTARA ha resultado ser un BREDOLAB que pasamos a controlar a partir de la verison 23.12 del ELISTARA de hoy
File name: GRPCONV.EXE.Muestra EliStartPage v23.10
Submission date: 2011-04-27 16:13:24 (UTC)
Current status: finished
Result: 36 /40 (90.0%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.04.27.01 2011.04.27 Win-Trojan/Bredolab.55808
AntiVir 7.11.7.7 2011.04.25 TR/Crypt.XPACK.Gen
Antiy-AVL 2.0.3.7 2011.04.27 Backdoor/Win32.Bredolab.gen
Avast 4.8.1351.0 2011.04.27 Win32:Bredolab-DO
Avast5 5.0.677.0 2011.04.27 Win32:Bredolab-DO
AVG 10.0.0.1190 2011.04.27 Generic18.AYTY
BitDefender 7.2 2011.04.27 Trojan.Crypter.F
CAT-QuickHeal 11.00 2011.04.27 Spammer.Tedroo.Gen
ClamAV 0.97.0.0 2011.04.27 –
Commtouch 5.3.2.6 2011.04.27 W32/MalwareF.IOIC
Comodo 8496 2011.04.27 Packed.Win32.Krap.XA
DrWeb 5.0.2.03300 2011.04.27 Trojan.Botnetlog.158
eSafe 7.0.17.0 2011.04.26 Win32.Crypter.F
eTrust-Vet 36.1.8294 2011.04.27 –
F-Prot 4.6.2.117 2011.04.27 W32/MalwareF.IOIC
Fortinet 4.2.257.0 2011.04.27 –
GData 22 2011.04.27 Trojan.Crypter.F
Ikarus T3.1.1.103.0 2011.04.27 Trojan.Crypter
Jiangmin 13.0.900 2011.04.27 TrojanDownloader.Small.astf
K7AntiVirus 9.98.4497 2011.04.27 Riskware
Kaspersky 9.0.0.837 2011.04.27 Backdoor.Win32.Bredolab.glf
McAfee 5.400.0.1158 2011.04.27 Spam-Mailbot.m
McAfee-GW-Edition 2010.1D 2011.04.27 Heuristic.BehavesLike.Win32.Backdoor.H
Microsoft 1.6802 2011.04.27 TrojanDownloader:Win32/Bredolab.X
NOD32 6075 2011.04.27 a variant of Win32/Kryptik.FSG
Norman 6.07.07 2011.04.27 W32/Suspicious_Gen2.BTGVJ
Panda 10.0.3.5 2011.04.27 Bck/Bredolab.AZ
PCTools 7.0.3.5 2011.04.27 Backdoor.Trojan
Prevx 3.0 2011.04.27 Medium Risk Malware
Rising 23.55.02.06 2011.04.27 Trojan.Win32.Generic.123415A5
Sophos 4.64.0 2011.04.27 Mal/EncPk-QY
SUPERAntiSpyware 4.40.0.1006 2011.04.27 –
Symantec 20101.3.2.89 2011.04.27 Backdoor.Trojan
TheHacker 6.7.0.1.184 2011.04.27 Backdoor/Bredolab.glf
TrendMicro 9.200.0.1012 2011.04.27 TROJ_KRAP.SMXD
TrendMicro-HouseCall 9.200.0.1012 2011.04.27 TROJ_KRAP.SMXD
VBA32 3.12.16.0 2011.04.27 BScope.Trojan.MTE.0734
VIPRE 9136 2011.04.27 Trojan.Win32.Rimecud.a (v)
ViRobot 2011.4.27.4433 2011.04.27 Trojan.Win32.Bredolab.32768.E
VirusBuster 13.6.323.0 2011.04.27 Backdoor.Bredolab!c22Xx/Ms2Cg
Additional informationShow all
MD5   : 6599a3266997167473128e87aaff5aa0
SHA1  : 673c537520dcd58025d04c47fb0a843886f34ecb
File size : 32768 bytes
Dicha version del ELISTARA 23.12 que lo controla y elimina estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 28-4-2011