NUEVAS VARIANTES DE DOWNLOADER TEPFER (acostumbra a descargar SPY ZBOT, CUTWAIL, VBNA, etc))

Dos nuevas variantes descargadas por el Sounder (tambien lo hace a veces el Fake Write), pasan a ser controladas a partir del ELISTARA 28.94 de hoy
El preanalisis de virustotal ofrece sendos informes:
MD5 823fc751b02ec80ab1a4bc8faf29fbb2
SHA1 c06f3db7e0a1bc06e2f784d222b3c52952c4a53b
File size 101.1 KB ( 103558 bytes )
SHA256: 006951b4a1eb6a3098b953e52329ca655a3d42515ec43ebf242e6cf26a6333e0
Nombre: 2go-on-nokia-c3.exe
Detecciones: 34 / 49
Fecha de análisis: 2013-12-10 10:54:16 UTC ( hace 1 minuto )

0 3

Antivirus Resultado Actualización
Ad-Aware Trojan.GenericKD.1439823 20131210
Agnitum Trojan.PWS.Tepfer!oco97HoyfXc 20131209
AhnLab-V3 Trojan/Win32.Zbot 20131210
AntiVir TR/Dropper.VB.5519 20131210
Antiy-AVL Trojan/Win32.Tepfer 20131210
Avast Win32:Injector-BOL [Trj] 20131210
AVG PSW.Generic12.QEF 20131210
Baidu-International Trojan.Win32.InfoStealer.ak 20131210
BitDefender Trojan.GenericKD.1439823 20131210
Bkav  20131209
ByteHero Virus.Win32.Heur.p 20130613
CAT-QuickHeal  20131209
ClamAV  20131209
CMC Heur.Win32.Veebee.1!O 20131202
Commtouch  20131210
Comodo UnclassifiedMalware 20131210
DrWeb Trojan.PWS.Siggen1.13570 20131210
Emsisoft  20131210
ESET-NOD32 Win32/PSW.Fareit.A 20131210
F-Prot  20131210
F-Secure Trojan.GenericKD.1439823 20131210
Fortinet W32/Tepfer.SOJW!tr 20131210
GData Trojan.GenericKD.1439823 20131210
Ikarus Trojan.Win32.Scarsi 20131210
Jiangmin  20131210
K7AntiVirus  20131209
K7GW Trojan ( 00490d871 ) 20131210
Kaspersky Trojan-PSW.Win32.Tepfer.sojw 20131210
Kingsoft  20130829
Malwarebytes Trojan.Crypt.NKN 20131210
McAfee PWS-Zbot.gen.oj 20131210
McAfee-GW-Edition PWS-Zbot.gen.oj 20131210
Microsoft VirTool:Win32/VBInject.gen!LD 20131210
MicroWorld-eScan Trojan.GenericKD.1439823 20131210
NANO-Antivirus  20131210
Norman Troj_Generic.RPFWN 20131210
nProtect  20131210
Panda Suspicious file 20131210
Rising  20131210
Sophos Troj/VBInjec-IK 20131210
SUPERAntiSpyware  20131209
Symantec WS.Reputation.1 20131210
TheHacker  20131209
TotalDefense  20131209
TrendMicro TROJ_GEN.R0CBC0PL713 20131210
TrendMicro-HouseCall TROJ_GEN.R0CBC0PL713 20131210
VBA32 TScope.Trojan.VB 20131210
VIPRE Trojan.Win32.Generic!BT 20131210
ViRobot Trojan.Win32.U.Zbot.103558 20131210
y el otro:
MD5 9e593917a9331fb7aa5d366214d75eba
SHA1 661dffde5a228df6ba6fa11d46ddefed35b54b9f
File size 101.1 KB ( 103542 bytes )
SHA256: 6768bd0a0dbd2d93dcc697d9fe0a6920b5f85af7af29778423febaebe19c49a2
Nombre: 3ds-max-2013-bible-pdf-ebook.exe
Detecciones: 35 / 49
Fecha de análisis: 2013-12-10 11:01:27 UTC ( hace 0 minutos )

0 2
Antivirus Resultado Actualización
Ad-Aware Trojan.GenericKD.1442005 20131210
Agnitum Trojan.PWS.Tepfer!dfvFq9NtgOQ 20131209
AhnLab-V3 Trojan/Win32.Zbot 20131210
AntiVir TR/Dropper.VB.5641 20131210
Antiy-AVL Trojan/Win32.Tepfer 20131210
Avast Win32:Injector-BOL [Trj] 20131210
AVG PSW.Generic12.QNC 20131210
Baidu-International Trojan.Win32.InfoStealer.AUC 20131210
BitDefender Trojan.GenericKD.1442005 20131210
Bkav  20131209
ByteHero Virus.Win32.Heur.p 20130613
CAT-QuickHeal Trojan.VBInject 20131209
ClamAV  20131209
CMC Heur.Win32.Veebee.1!O 20131202
Commtouch W32/Trojan.GEZG-2591 20131210
Comodo  20131210
DrWeb Trojan.PWS.Siggen1.13637 20131210
Emsisoft  20131210
ESET-NOD32 Win32/PSW.Fareit.A 20131210
F-Prot W32/Trojan3.GRU 20131210
F-Secure Trojan.GenericKD.1442005 20131210
Fortinet W32/Tepfer.SOXV!tr.pws 20131210
GData Trojan.GenericKD.1442005 20131210
Ikarus Virus.Win32.VBInject 20131210
Jiangmin  20131210
K7AntiVirus Trojan ( 00490e901 ) 20131209
K7GW Trojan ( 00490e901 ) 20131210
Kaspersky Trojan-PSW.Win32.Tepfer.soxv 20131210
Kingsoft  20130829
Malwarebytes Trojan.Crypt.NKN 20131210
McAfee RDN/Spybot.bfr!h 20131210
McAfee-GW-Edition RDN/Spybot.bfr!h 20131210
Microsoft VirTool:Win32/VBInject.gen!LD 20131210
MicroWorld-eScan Trojan.GenericKD.1442005 20131210
NANO-Antivirus  20131210
Norman Troj_Generic.RPJCT 20131210
nProtect Trojan-PWS/W32.Tepfer.103542 20131210
Panda Trj/Genetic.gen 20131210
Rising  20131210
Sophos Troj/VBInjec-IL 20131210
SUPERAntiSpyware  20131209
Symantec  20131210
TheHacker  20131209
TotalDefense  20131209
TrendMicro TROJ_GEN.R0CBC0FLA13 20131210
TrendMicro-HouseCall TROJ_GEN.R0CBC0FLA13 20131210
VBA32  20131210
VIPRE Trojan.Win32.Generic!BT 20131210
ViRobot  20131210
Dicha version del ELISTARA 28.94 que los detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 10-12-2013