NUEVA VARIANTE DE WORM Cubspewt

A partir del ELISTARA 30.65 de hoy pasamos a controlar esta nueva variante de gusano

EL preanalisis de virustotal ofrece el siguiente informe:

MD5 307c7f872337dc7c9a730d79dd5ccaa2
SHA1 7aa53c3f6946fdb93bdd186ca5ec64a3390fcaaa
Tamaño del fichero 1.3 MB ( 1339392 bytes )
SHA256: 8dc94cff69e4189adc3928ea8f58b1a5887bcc2d22fe08411bd5490a0f0882f9
Nombre: drivecheck.exe
Detecciones: 42 / 54
Fecha de análisis: 2014-09-23 15:45:14 UTC ( hace 21 minutos )
0 1
Antivirus Resultado Actualización
AVG IRC/BackDoor.SdBot4.MBJ 20140923
Ad-Aware Packer.Enigma.A 20140923
Agnitum Backdoor.Agent!V8tvNjO3HeI 20140922
AhnLab-V3 Worm/Win32.IRCBot 20140923
Antiy-AVL Trojan/Win32.Swisyn 20140923
Avast Win32:Rootkit-gen [Rtk] 20140923
Avira TR/Crypt.FKM.Gen 20140923
Baidu-International Backdoor.Win32.Rbot.aypF 20140923
BitDefender Packer.Enigma.A 20140923
Bkav W32.Tenigma.Trojan 20140923
Comodo UnclassifiedMalware 20140923
Cyren W32/Backdoor.XIUG-7390 20140923
DrWeb Trojan.Packed.193 20140923
Emsisoft Packer.Enigma.A (B) 20140923
F-Prot W32/Backdoor2.EWXB 20140923
F-Secure Packer.Enigma.A 20140923
Fortinet W32/Autorun.H!worm 20140923
GData Packer.Enigma.A 20140923
Ikarus Backdoor.Rbot 20140923
Jiangmin Backdoor/RBot.nhv 20140922
K7AntiVirus Riskware ( 0040eff71 ) 20140923
K7GW Riskware ( 0040eff71 ) 20140923
Kaspersky Backdoor.Win32.Rbot.bnza 20140923
McAfee W32/CubsPewt.worm 20140923
McAfee-GW-Edition BehavesLike.Win32.Yahlover.tz 20140923
MicroWorld-eScan Packer.Enigma.A 20140923
Microsoft Worm:Win32/Cubspewt.A 20140923
NANO-Antivirus Trojan.Win32.FKM.dffcvz 20140923
Norman Obfuscated.BR!genr 20140923
Panda Trj/Thed.E 20140923
Qihoo-360 HEUR/Malware.QVM18.Gen 20140923
Rising PE:Trojan.Flg!1.66BE 20140923
SUPERAntiSpyware Trojan.Agent/Gen-MSFake 20140923
Sophos Mal/AutoRun-H 20140923
Tencent Win32.Trojan.Cubspew.Lhng 20140923
TotalDefense Win32/Rbot.JVT 20140923
TrendMicro WORM_CUBSPEW.SMD 20140923
TrendMicro-HouseCall WORM_CUBSPEW.SMD 20140923
VIPRE Trojan.Win32.Generic.pak!cobra 20140923
ViRobot Backdoor.Win32.IRCBot.425984.D 20140923
Zillya Backdoor.RBot.Win32.1824 20140923
nProtect Backdoor/W32.RBot.1339392.E 20140923

Dicha version del ELISTARA 30.65 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 23-9-2014