VARIANTE DE CONFICKER YA CONTROLADO

Recibimos muestra de otra variante de CONFICKER ya detectada por ELITRIIP actual  7.17:

File name: jwgkvsq.vmx
Submission date: 2011-01-15 16:09:21 (UTC)
Current status: finished
Result: 43 /43 (100.0%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.15.00 2011.01.14 Win-Trojan/Agent.160899
AntiVir 7.11.1.144 2011.01.14 Worm/Conficker.Z.54
Antiy-AVL 2.0.3.7 2011.01.15 Worm/Win32.Kido.gen
Avast 4.8.1351.0 2011.01.15 Win32:Trojan-gen
Avast5 5.0.677.0 2011.01.15 Win32:Trojan-gen
AVG 10.0.0.1190 2011.01.15 Worm/Downadup
BitDefender 7.2 2011.01.15 Win32.Worm.Downadup.Gen
CAT-QuickHeal 11.00 2011.01.15 I-Worm.Kido.ih
ClamAV 0.96.4.0 2011.01.15 Worm.Downadup-2
Command 5.2.11.5 2011.01.15 W32/Conficker!Generic
Comodo 7399 2011.01.15 NetWorm.Win32.Kido.A
DrWeb 5.0.2.03300 2011.01.15 Trojan.Click1.24250
Emsisoft 5.1.0.1 2011.01.15 Trojan.Win32.Genome!IK
eSafe 7.0.17.0 2011.01.13 Win32.Worm.Downadup
eTrust-Vet 36.1.8100 2011.01.14 Win32/Kido!generic
F-Prot 4.6.2.117 2011.01.14 W32/Conficker!Generic
F-Secure 9.0.16160.0 2011.01.15 Worm:W32/Downadup.gen!A
Fortinet 4.2.254.0 2011.01.15 W32/Conficker.A!worm
GData 21 2011.01.15 Win32.Worm.Downadup.Gen
Ikarus T3.1.1.97.0 2011.01.15 Trojan.Win32.Genome
Jiangmin 13.0.900 2011.01.15 Trojan/Genome.dog
K7AntiVirus 9.75.3548 2011.01.14 EmailWorm
Kaspersky 7.0.0.125 2011.01.15 Net-Worm.Win32.Kido.kj
McAfee 5.400.0.1158 2011.01.15 W32/Conficker.worm.gen.a
McAfee-GW-Edition 2010.1C 2011.01.14 Heuristic.BehavesLike.Win32.Packed.A
Microsoft 1.6402 2011.01.15 Worm:Win32/Conficker.B
NOD32 5789 2011.01.15 Win32/Conficker.AK
Norman 6.06.12 2011.01.15 W32/Conficker.FF
nProtect 2011-01-15.01 2011.01.15 Trojan/W32.Genome.160899
Panda 10.0.2.7 2011.01.15 W32/Conficker.B.worm
PCTools 7.0.3.5 2011.01.15 Net-Worm.Conficker!rem
Prevx 3.0 2011.01.15 High Risk Worm
Rising 22.82.05.00 2011.01.15 Trojan.Win32.Generic.51EFEE7B
Sophos 4.61.0 2011.01.15 Mal/Conficker-A
SUPERAntiSpyware 4.40.0.1006 2011.01.15 Trojan.Conficker/Variant
Symantec 20101.3.0.103 2011.01.15 W32.Downadup.B
TheHacker 6.7.0.1.115 2011.01.14 Trojan/Genome.icek
TrendMicro 9.120.0.1004 2011.01.15 WORM_DOWNAD.AD
TrendMicro-HouseCall 9.120.0.1004 2011.01.15 WORM_DOWNAD.AD
VBA32 3.12.14.2 2011.01.14 Worm.Win32.kido.90
VIPRE 8077 2011.01.15 Net-Worm.Win32.Kido.ih
ViRobot 2011.1.15.4256 2011.01.15 Worm.Win32.Conficker.160899
VirusBuster 13.6.147.0 2011.01.14 Worm.Kido.LD
Additional informationShow all
MD5   : 9013a966ea22aa85f5ae581a34139f86
SHA1  : 4e57e418bbade51c91becd914ace56e8791635b6

File size : 160899 bytes

Se recuerda que este malware entra por IP si no se tiene el parche MS08-067, y se propaga por recursos compartidos y por pendrive. Se aconseja vacunar ordenadores y pendrives con ELIPEN

Para la desinfección, existe en nuestra web protocolo a seguir en NOTICIA del 13-1-2009  (USB445.EXE)

saludos

ms, 21-1-2011