Nuevo malware Redirector controlado por el VirusScan desde DAT 5836 de hoy

---

Un nuevo malware pasa a ser controlado por McAfee a partir de DATS 5836 de hoy:

"McAfee"

JS/Redirector.b



Type

Trojan

SubType

JavaScript

Discovery Date

12/17/2009

Length

7.716

Minimum DAT

5836 (12/18/2009)

Updated DAT

5836 (12/18/2009)

Minimum Engine

5.4.00

Description Added

12/17/2009

Description Modified

12/17/2009 10:24 PM (PT)

Hasta ahora lo detectaba heuristicamente, como puede verse en este analisis del VirusTotal:





File overlay.xul received on 2009.12.17 00:27:00 (UTC)

Current status: finished

Result: 11/41 (26.83%)

Compact Compact

Print results Print results

Antivirus Version Last Update Result

a-squared 4.5.0.43 2009.12.16 Trojan.JS.Gord!IK

AhnLab-V3 5.0.0.2 2009.12.16 HTML/Xema

AntiVir 7.9.1.114 2009.12.16 JS/Gord.A.1

Antiy-AVL 2.0.3.7 2009.12.16 -

Authentium 5.2.0.5 2009.12.02 -

Avast 4.8.1351.0 2009.12.17 -

AVG 8.5.0.427 2009.12.16 JS/Redir

BitDefender 7.2 2009.12.16 Trojan.Script.235944

CAT-QuickHeal 10.00 2009.12.16 -

ClamAV 0.94.1 2009.12.16 -

Comodo 3267 2009.12.16 UnclassifiedMalware

DrWeb 5.0.0.12182 2009.12.16 -

eSafe 7.0.17.0 2009.12.16 -

eTrust-Vet 35.1.7179 2009.12.16 -

F-Prot 4.5.1.85 2009.12.16 -

F-Secure 9.0.15370.0 2009.12.16 Trojan.Script.235944

Fortinet 4.0.14.0 2009.12.16 -

GData 19 2009.12.17 Trojan.Script.235944

Ikarus T3.1.1.78.0 2009.12.16 Trojan.JS.Gord

Jiangmin 13.0.900 2009.12.16 -

K7AntiVirus 7.10.922 2009.12.16 -

Kaspersky 7.0.0.125 2009.12.17 -

McAfee 5834 2009.12.16 -

McAfee+Artemis 5834 2009.12.16 -

McAfee-GW-Edition 6.8.5 2009.12.17 Script.Gord.A.1

Microsoft 1.5302 2009.12.16 Trojan:JS/Gord.A

NOD32 4694 2009.12.16 -

Norman 6.04.03 2009.12.16 -

nProtect 2009.1.8.0 2009.12.16 -

Panda 10.0.2.2 2009.12.15 -

PCTools 7.0.3.5 2009.12.16 -

Prevx 3.0 2009.12.17 -

Rising 22.26.02.04 2009.12.16 -

Sophos 4.49.0 2009.12.16 -

Sunbelt 3.2.1858.2 2009.12.17 -

Symantec 1.4.4.12 2009.12.17 -

TheHacker 6.5.0.2.094 2009.12.15 -

TrendMicro 9.100.0.1001 2009.12.16 -

VBA32 3.12.12.0 2009.12.16 -

ViRobot 2009.12.16.2092 2009.12.16 -

VirusBuster 5.0.21.0 2009.12.16 -

Additional information

File size: 7716 bytes

MD5 : 5b6d74705cdc585c64e4a2861ae39c29

SHA1 : 37d9f1dd37cdf3479699924fc5885bdbfd8c1c89



Para mas informacion ver http://vil.nai.com/vil/content/v_249453.htm







saludos



ms, 18-12-2009