Variante de BUZUS que es descargado por worm VBNA

Una nueva variante de la familia BUZUS pasa a ser controlada a partir del ELISTARA 24.65

El preanalisis de Viris Total ofrece el siguiente informe:
Nombre fichero : tiihaj.com

SHA256: 7d0e8a611c0409a02a7b66eac4389612b8940eecf8b0602ae48ccb9ba13b5672
SHA1: 87b8c32de34bb3283b2a902c8d2043db0bb4b8b9
MD5: 0c330a9628c3db7fabf20b850b4e4219
File size: 928.0 KB ( 950272 bytes )
File type: Win32 EXE
Detection ratio: 20 / 41
Analysis date: 2012-01-16 12:12:20 UTC ( 0 minutes ago )

01
Antivirus Result Version Update
AhnLab-V3 – 2012.01.15.00 20120115
AntiVir TR/Dropper.Gen 7.11.21.35 20120116
Antiy-AVL – 2.0.3.7 20120116
Avast Win32:AutoRun-CNJ [Trj] 6.0.1289.0 20120116
AVG Dropper.Generic5.SZB 10.0.0.1190 20120116
BitDefender Gen:Variant.Kazy.53014 7.2 20120116
ByteHero – 1.0.0.1 20120112
CAT-QuickHeal – 12.00 20120116
ClamAV – 0.97.3.0 20120116
Commtouch – 5.3.2.6 20120116
Comodo UnclassifiedMalware 11281 20120116
DrWeb BackDoor.Maxplus.680 5.0.2.03300 20120116
Emsisoft Trojan.Win32.Sirefef!IK 5.1.0.11 20120116
eSafe Win32.TRDropper 7.0.17.0 20120115
eTrust-Vet – 37.0.9683 20120116
F-Prot – 4.6.5.141 20120116
F-Secure Gen:Variant.Kazy.53014 9.0.16440.0 20120116
Fortinet W32/VB.NZU!tr 4.3.388.0 20120115
GData Gen:Variant.Kazy.53014 22 20120116
Ikarus Trojan.Win32.Sirefef T3.1.1.113.0 20120116
Jiangmin – 13.0.900 20120115
K7AntiVirus – 9.126.5936 20120113
Kaspersky HEUR:Worm.Win32.Generic 9.0.0.837 20120116
McAfee Artemis!0C330A9628C3 5.400.0.1158 20120116
McAfee-GW-Edition Artemis!0C330A9628C3 2010.1E 20120116
Microsoft TrojanDownloader:Win32/Small 1.7903 20120116
NOD32 Win32/TrojanDropper.VB.NZU 6798 20120116
Norman – 6.07.13 20120116
nProtect – 2012-01-15.01 20120116
PCTools Trojan.Gen 8.0.0.5 20120116
Prevx – 3.0 20120116
Rising – 23.93.00.02 20120116
SUPERAntiSpyware – 4.40.0.1006 20120114
Symantec Trojan.Gen.2 20111.2.0.82 20120116
TheHacker – 6.7.0.1.379 20120115
TrendMicro – 9.500.0.1008 20120116
TrendMicro-HouseCall – 9.500.0.1008 20120116
VBA32 – 3.12.16.4 20120116
VIPRE Trojan.Win32.Generic!BT 11405 20120116
ViRobot – 2012.1.16.4881 20120116
VirusBuster – 14.1.168.0 20120115
DIcha version del ELISTARA 24.65 que lo detecta y elimina ya está disponible en nuestra web

saludos

ms, 16-1-2012