Web de "Singapore Foreign Exchange Market" infectada

---

WebSense nos informa que la Web oficial del "Singapore Foreign Exchange Market", (Mercado de Divisas de Singapur), está infectada con un iframe, apenas conocido por la mayoróa de antivirus (17,5 %):



File a.exe received on 2009.11.06 07:33:37 (UTC)

Current status: finished

Result: 7/40 (17.50%)

Compact Compact

Print results Print results

Antivirus Version Last Update Result

a-squared 4.5.0.41 2009.11.06 -

AhnLab-V3 5.0.0.2 2009.11.06 -

AntiVir 7.9.1.59 2009.11.05 -

Antiy-AVL 2.0.3.7 2009.11.05 -

Authentium 5.2.0.5 2009.11.06 -

Avast 4.8.1351.0 2009.11.06 Win32:Rootkit-gen

AVG 8.5.0.423 2009.11.05 -

BitDefender 7.2 2009.11.06 -

CAT-QuickHeal 10.00 2009.11.06 -

ClamAV 0.94.1 2009.11.06 PUA.Packed.ASPack212

Comodo 2856 2009.11.06 -

DrWeb 5.0.0.12182 2009.11.06 -

eTrust-Vet None 2009.11.05 -

F-Prot 4.5.1.85 2009.11.05 -

F-Secure 9.0.15370.0 2009.11.04 -

Fortinet 3.120.0.0 2009.11.05 -

GData 19 2009.11.06 Win32:Rootkit-gen

Ikarus T3.1.1.74.0 2009.11.06 -

Jiangmin 11.0.800 2009.11.06 -

K7AntiVirus 7.10.889 2009.11.05 -

Kaspersky 7.0.0.125 2009.11.06 -

McAfee 5793 2009.11.05 -

McAfee+Artemis 5793 2009.11.05 -

McAfee-GW-Edition 6.8.5 2009.11.06 Heuristic.BehavesLike.Win32.Dropper.B

Microsoft 1.5202 2009.11.05 -

NOD32 4577 2009.11.05 -

Norman 6.03.02 2009.11.05 -

nProtect 2009.1.8.0 2009.11.06 -

Panda 10.0.2.2 2009.11.05 Suspicious file

PCTools 7.0.3.5 2009.11.06 -

Prevx 3.0 2009.11.06 Medium Risk Malware

Rising 21.54.41.00 2009.11.06 -

Sophos 4.47.0 2009.11.06 -

Sunbelt 3.2.1858.2 2009.11.06 -

Symantec 1.4.4.12 2009.11.06 -

TheHacker 6.5.0.2.062 2009.11.05 -

TrendMicro 9.0.0.1003 2009.11.06 PAK_Generic.001

VBA32 3.12.10.11 2009.11.06 -

ViRobot 2009.11.6.2024 2009.11.06 -

VirusBuster 4.6.5.0 2009.11.05 -

Additional information

File size: 101376 bytes

MD5 : 775883705f4b6fc58fbfb3be11734bd6

SHA1 : 07825828428bc80cc9409a13beab44ee5c8c0ddf



Y esta es la imagen la página infectada:

http://securitylabs.websense.com/content/Assets/AlertMedia/sfemc.png" border="0" hspace="10" vspace="10"/>

Lo cual se avisa por si algun usuario tiene negocios con Singapur...



saludos



ms, 10-11-2009