storm_0419_3

qianwenxiang

crc/0f61c30b

无尽藏海

The file 'load 3.exe' has been determined to be 'UNDER ANALYSIS'.

wangjay1980

比速度？

qigang

rising20.40.52未杀！

无尽藏海

这次飘的多了

1688388728

发现病毒: Email-Worm.Win32.Zhelatin.xv
文件: load 3[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0HYBKPUB
进程: Maxthon.exe

aerbeisi

碰到双休日，都矬了。  

只有BD可以启发它，其他启发强的还没有研究透这个病毒。

The EQs

ESET新的网络监控启发应该可以灭了它

zwl2828

The requested object is INFECTED with the following viruses: Email-Worm.Win32.Zhelatin.xv

chabosh

文件 load_3.rar 接收于 2008.04.20 01:47:05 (CET)

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.4.19.0	2008.04.18	-
AntiVir	7.8.0.8	2008.04.18	-
Authentium	4.93.8	2008.04.19	-
Avast	4.8.1169.0	2008.04.19	-
AVG	7.5.0.516	2008.04.19	-
BitDefender	7.2	2008.04.20	DeepScan:Generic.Malware.SFMHY@mmign.94D27DBE
CAT-QuickHeal	9.50	2008.04.19	(Suspicious) - DNAScan
ClamAV	0.92.1	2008.04.20	-
DrWeb	4.44.0.09170	2008.04.19	Trojan.Packed.431
eSafe	7.0.15.0	2008.04.17	Suspicious File
eTrust-Vet	31.3.5714	2008.04.19	-
Ewido	4.0	2008.04.19	-
F-Prot	4.4.2.54	2008.04.20	-
F-Secure	6.70.13260.0	2008.04.19	Email-Worm.Win32.Zhelatin.xv
FileAdvisor	1	2008.04.20	-
Fortinet	3.14.0.0	2008.04.19	W32/PackTibs.N
Ikarus	T3.1.1.26	2008.04.20	Email-Worm.Win32.Zhelatin.xv
Kaspersky	7.0.0.125	2008.04.20	Email-Worm.Win32.Zhelatin.xv
McAfee	5277	2008.04.18	-
Microsoft	1.3408	2008.04.20	Backdoor:Win32/Nuwar.A
NOD32v2	3041	2008.04.19	-
Norman	5.80.02	2008.04.18	-
Panda	9.0.0.4	2008.04.19	Suspicious file
Prevx1	V2	2008.04.20	-
Rising	20.40.52.00	2008.04.19	-
Sophos	4.28.0	2008.04.19	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.20	-
TheHacker	6.2.92.285	2008.04.19	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.19	-
Webwasher-Gateway	6.6.2	2008.04.18	-