New variant of slenfbot

[mojako_2you]

Just wanna to remind at all user currently there is new slenfbot thread going through all type of chat messaging either google talk, YM or MSN itself. Please be aware of image or zip file coming from chat messaging as if you are already infected then you will be the host to sent it to another user. To thus who are infected, please dont go on9 via messaging application until you are sure that you are clean and didnt infected another computer. Thanks.

[Yanto.Chiang]

Hi Mojako,

Thanks for your interesting information, anyway do you have any related article about this?
And how about to disinfection this attacks?

[polonus]

Hi Yanto.Chiang,

Here is a malware description for this malware family:
http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=73380
This is what MS has on it:
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32/Slenfbot
and this malware removal proposal:
http://www.techsupportforum.com/security-center/virus-trojan-spyware-help/hijackthis-log-help-inactive/292661-slenfbot-gen-b.html
prevalence (map) http://www.pc1news.com/virus/worm-slenfbot.html
decription:
http://www.cert-in.org.in/virus/slenfbot_worm.htm

http://www.threatexpert.com/report.aspx?md5=76afce8246fa251e8e66ab31c82100e9
http://www.threatexpert.com/report.aspx?md5=0189149b306018db22d8955f4884e2e6

polonus