Variante de Trojan Proxy : Win32/Pramro.F

Una nueva variante de este malware nos ha llegado conjuntamente con muestras de ficheros infectados por el virus SALITY

Este proxy malware lo pasamos a controlar a partir del ELISTARA 23.17,
File name: winpbqo.exe
Submission date: 2011-05-06 10:11:16 (UTC)
Result: 38/ 42 (90.5%)
VT Community

not reviewed
Safety score: –
Compact Print results
Antivirus Version Last Update Result
AhnLab-V3 2011.05.06.01 2011.05.06 Win-Trojan/Mailbot.12970
AntiVir 7.11.7.161 2011.05.06 TR/Downloader.Gen
Antiy-AVL 2.0.3.7 2011.05.06 Backdoor/Win32.Mazben.gen
Avast 4.8.1351.0 2011.05.05 Win32:Sality-GR
Avast5 5.0.677.0 2011.05.05 Win32:Sality-GR
AVG 10.0.0.1190 2011.05.06 Agent2.CNXY
BitDefender 7.2 2011.05.06 Generic.Malware.FYdld.CECA23A0
CAT-QuickHeal 11.00 2011.05.06 Trojan.Pramro.fab
ClamAV 0.97.0.0 2011.05.06 –
Commtouch 5.3.2.6 2011.05.06 W32/Heuristic-170!Eldorado
Comodo 8600 2011.05.06 Heur.Suspicious
DrWeb 5.0.2.03300 2011.05.06 Trojan.DownLoad2.22436
Emsisoft 5.1.0.5 2011.05.06 Virus.Win32.Sality!IK
eSafe 7.0.17.0 2011.05.05 Win32.TRDownloader
eTrust-Vet None 2011.05.06 Win32/Maazben!generic
F-Prot 4.6.2.117 2011.05.05 W32/Heuristic-170!Eldorado
F-Secure 9.0.16440.0 2011.05.06 Generic.Malware.FYdld.CECA23A0
Fortinet 4.2.257.0 2011.05.06 W32/TinyDL.T!tr
GData 22 2011.05.06 Generic.Malware.FYdld.CECA23A0
Ikarus T3.1.1.103.0 2011.05.06 Virus.Win32.Sality
Jiangmin 13.0.900 2011.05.05 Backdoor.Generic.blq
K7AntiVirus 9.101.4574 2011.05.05 Trojan
Kaspersky 9.0.0.837 2011.05.06 Backdoor.Win32.Mazben.gf
McAfee 5.400.0.1158 2011.05.06 Spam-Mailbot
McAfee-GW-Edition 2010.1D 2011.05.05 Spam-Mailbot
Microsoft 1.6802 2011.05.06 TrojanProxy:Win32/Pramro.F
NOD32 6099 2011.05.06 probably a variant of Win32/Agent.HLU
Norman 6.07.07 2011.05.06 W32/Suspicious!api.A
Panda 10.0.3.5 2011.05.05 Generic Trojan
PCTools 7.0.3.5 2011.05.06 Hacktool.Proxy
Prevx 3.0 2011.05.06 Medium Risk Malware
Rising 23.56.03.05 2011.05.05 Trojan.Win32.Generic.12857AB4
Sophos 4.65.0 2011.05.06 Mal/TinyDL-T
SUPERAntiSpyware 4.40.0.1006 2011.05.06 Trojan.Agent/Gen-MailDrop/Spammer
Symantec 20101.3.2.89 2011.05.06 Hacktool.Proxy
TheHacker 6.7.0.1.189 2011.05.06 –
TrendMicro 9.200.0.1012 2011.05.06 TROJ_PRAMRO.SMI
TrendMicro-HouseCall 9.200.0.1012 2011.05.06 TROJ_PRAMRO.SMI
VBA32 3.12.16.0 2011.05.05 –
VIPRE 9199 2011.05.06 Trojan.Win32.Generic!BT
ViRobot 2011.5.6.4448 2011.05.06 –
VirusBuster 13.6.338.0 2011.05.05 Trojan.Agent!a1Ehd8/hpt4
Additional informationShow all
MD5   : 587c99603b273107779f1cdd37c37ad8

File size : 12970 bytes
Dicho ELISATARA 23.17 que lo detecta y elimina estará disponible en nuestra web a partir de las 15 h CEST

saludos

ms, 6-5-2011