Nueva variante de PALEVO (se hace pasar por driver de FIREFOX)

A traves de muestras pedidas por nuestras utilidades, pasamos a controlar nuevas variantes de PALEVO, a partir de la verison 1.97 del ELIPALEVO  de hoy

File name: TBSZ.EXE (Taskman).vir
Submission date: 2010-11-25 14:56:22 (UTC)
Current status: finished
Result: 28 /43 (65.1%)
 VT Community

malware
 Safety score: 0.0% 
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2010.11.25.01 2010.11.25 Trojan/Win32.Buzus
AntiVir 7.10.14.104 2010.11.25 TR/Small.AB
Antiy-AVL 2.0.3.7 2010.11.25 Trojan/Win32.Buzus.gen
Avast 4.8.1351.0 2010.11.25 Win32:Trojan-gen
Avast5 5.0.594.0 2010.11.25 Win32:Trojan-gen
AVG 9.0.0.851 2010.11.25 Dropper.Small.ENG
BitDefender 7.2 2010.11.25 Gen:Variant.Buzus.2
CAT-QuickHeal 11.00 2010.11.25 –
ClamAV 0.96.4.0 2010.11.25 –
Command 5.2.11.5 2010.11.25 –
Comodo 6843 2010.11.25 UnclassifiedMalware
DrWeb 5.0.2.03300 2010.11.25 BackDoor.Butter.23
Emsisoft 5.0.0.50 2010.11.25 Trojan.Win32.Buzus!IK
eSafe 7.0.17.0 2010.11.24 –
eTrust-Vet 36.1.7999 2010.11.25 –
F-Prot 4.6.2.117 2010.11.24 –
F-Secure 9.0.16160.0 2010.11.25 Gen:Variant.Buzus.2
Fortinet 4.2.254.0 2010.11.25 W32/Injector.fam!tr
GData 21 2010.11.25 Gen:Variant.Buzus.2
Ikarus T3.1.1.90.0 2010.11.25 Trojan.Win32.Buzus
Jiangmin 13.0.900 2010.11.25 Trojan/Buzus.ong
K7AntiVirus 9.69.3075 2010.11.25 –
Kaspersky 7.0.0.125 2010.11.25 Trojan.Win32.Buzus.eukw
McAfee 5.400.0.1158 2010.11.25 –
McAfee-GW-Edition 2010.1C 2010.11.25 Heuristic.BehavesLike.Win32.Worm.H
Microsoft 1.6402 2010.11.25 VirTool:Win32/DelfInject.gen!BV
NOD32 5648 2010.11.25 –
Norman 6.06.10 2010.11.25 –
nProtect 2010-11-25.01 2010.11.25 Gen:Variant.Buzus.2
Panda 10.0.2.7 2010.11.25 Trj/StartPage.DAW
PCTools 7.0.3.5 2010.11.25 Malware.Pilleuz
Prevx 3.0 2010.11.25 High Risk Cloaked Malware
Rising 22.75.03.00 2010.11.25 –
Sophos 4.60.0 2010.11.25 –
SUPERAntiSpyware 4.40.0.1006 2010.11.25 –
Symantec 20101.2.0.161 2010.11.25 W32.Pilleuz!gen2
TheHacker 6.7.0.1.090 2010.11.25 –
TrendMicro 9.120.0.1004 2010.11.25 WORM_BUZUS.SMX
TrendMicro-HouseCall 9.120.0.1004 2010.11.25 WORM_BUZUS.SMX
VBA32 3.12.14.2 2010.11.25 BScope.Trojan.MTA.0635
VIPRE 7407 2010.11.25 Trojan.Win32.Buzus.expr (v)
ViRobot 2010.11.19.4158 2010.11.25 Trojan.Win32.Buzus.120832.K
VirusBuster 13.6.60.0 2010.11.25 –
Additional informationShow all 
MD5   : d6624ac1fd4de2c580ba6c6a7d46f6db
SHA1  : 3d381ea43cb1b0c284839a48fe0ad43f35508e6f

File size : 121344 bytes

publisher….: Mozilla Corporation
copyright….: (c)Firefox and Mozilla Developers, according to the MPL 1.1/GPL 2.0/LGPL 2.1 licenses, as applicable.
product……: Firefox
description..: Firefox
original name: firefox.exe
internal name: Firefox
file version.: 1.9.2.6
 
Esta familia de troyanos se propaga tambien a través de pendrive, por lo que se recomienda vacunar ordenadores y pendrives con el ELIPEN

saludos

ms, 25-11-2010