Variante de WORM VBNA controlado por ELIVBNA

Recibidas hoy muestras de VBNA, ofrecemos el preanalisis con VirusTotal, si bien ya son controladas por el actual ELIVBNA:

File name: moakegx.exe
Submission date: 2011-10-18 07:20:03 (UTC)
Current status: queued queued analysing finished
Result: 39/ 43 (90.7%)
VT Community

malware
Safety score: 0.0%
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.10.17.00 2011.10.17 Win32/Vbna4.worm.Gen
AntiVir 7.11.16.29 2011.10.17 TR/Dldr.VB.wps
Antiy-AVL 2.0.3.7 2011.10.18 –
Avast 6.0.1289.0 2011.10.18 Win32:AutoRun-BLX [Wrm]
AVG 10.0.0.1190 2011.10.17 Worm/VB.12.AF
BitDefender 7.2 2011.10.18 Trojan.Downloader.VB.WPO
ByteHero 1.0.0.1 2011.09.23 –
CAT-QuickHeal 11.00 2011.10.18 Worm.VBNA.gen
ClamAV 0.97.0.0 2011.10.18 Worm.VB-1761
Commtouch 5.3.2.6 2011.10.18 W32/Vobfus.E.gen!Eldorado
Comodo 10482 2011.10.18 Worm.Win32.Agent.vb
DrWeb 5.0.2.03300 2011.10.18 Trojan.MulDrop1.40418
Emsisoft 5.1.0.11 2011.10.18 Worm.Win32.Vobfus!IK
eSafe 7.0.17.0 2011.10.17 –
eTrust-Vet 36.1.8624 2011.10.17 Win32/Vobfus.FH
F-Prot 4.6.5.141 2011.10.17 W32/Vobfus.E.gen!Eldorado
F-Secure 9.0.16440.0 2011.10.18 Worm:W32/Vobfus.BS
Fortinet 4.3.370.0 2011.10.18 W32/VBNA.D!tr
GData 22 2011.10.18 Trojan.Downloader.VB.WPO
Ikarus T3.1.1.107.0 2011.10.18 Worm.Win32.Vobfus
Jiangmin 13.0.900 2011.10.17 Worm/VBNA.wup
K7AntiVirus 9.115.5300 2011.10.17 EmailWorm
Kaspersky 9.0.0.837 2011.10.18 Worm.Win32.VBNA.alpv
McAfee 5.400.0.1158 2011.10.18 Downloader-CJX.gen.g
McAfee-GW-Edition 2010.1D 2011.10.18 Downloader-CJX.gen.g
Microsoft 1.7702 2011.10.18 Worm:Win32/Vobfus.Y
NOD32 6551 2011.10.18 Win32/AutoRun.VB.RT
Norman 6.07.11 2011.10.18 W32/VBNA.BS
nProtect 2011-10-18.01 2011.10.18 Trojan-Downloader/W32.Agent.138240.AD
Panda 10.0.3.5 2011.10.17 W32/Sohanat.LJ
PCTools 8.0.0.5 2011.10.18 Malware.Changeup
Prevx 3.0 2011.10.18 –
Rising 23.80.01.02 2011.10.18 Trojan.Win32.VBCode.cbl
Sophos 4.70.0 2011.10.18 Mal/SillyFDC-D
SUPERAntiSpyware 4.40.0.1006 2011.10.18 Trojan.Agent/Gen-FakeAlert
Symantec 20111.2.0.82 2011.10.18 W32.Changeup
TheHacker 6.7.0.1.325 2011.10.17 W32/VBNA.alpv
TrendMicro 9.500.0.1008 2011.10.18 WORM_VBNA.SMR
TrendMicro-HouseCall 9.500.0.1008 2011.10.18 WORM_VBNA.SMR
VBA32 3.12.16.4 2011.10.17 Worm.VBNA.alpv
VIPRE 10796 2011.10.18 Worm.Win32.VBNA.akzw (v)
ViRobot 2011.10.18.4724 2011.10.18 Worm.Win32.VBNA.138240
VirusBuster 14.1.16.0 2011.10.17 Worm.VBNA.ADYP
Additional informationShow all
MD5 : c0b5723841d72c9a729bc83c7b07541e
SHA1 : 4bdb0a43f0573deedf90ff8b7c59dd9447eb1dd5

File size : 138240 bytes

publisher….: n/a
copyright….: n/a
product……: PSfADGit
description..: n/a
original name: PSfADGit.exe
internal name: PSfADGit
file version.: 8.15

La actual version 2.25 del ELIVBNA ya controla estas variantes, aparte d eetar controladas por la inmensa mayoria de AV actuales.

saludos

ms, 18-10-2011