Рис. 1. Письмо со ссылкой на инфицированный сайт.
Если на компьютере не установлен резидентный сторож, то вирус, получает управление незаметно для пользователя.
Рис. 2. Реакция сторожа DrWeb.
Таблица 1. Реакция различных антивирусов на вирус.
Наименование антивирусов | Текущая версия антивируса | Актуальная дата вирусной базы |
Реакции антивируса. |
| AhnLab-V3 | 2007.8.15.0 | 2007.08.14 | no virus found |
| AntiVir | 7.4.1.62 | 2007.08.14 | no virus found |
| Authentium | 4.93.8 | 2007.08.15 | no virus found |
| Avast | 4.7.1029.0 | 2007.08.13 !! | no virus found |
| AVG | 7.5.0.476 | 2007.08.14 | no virus found |
| BitDefender | 7.2 | 2007.08.15 | no virus found |
| CAT-QuickHeal | 9.00 | 2007.08.14 | no virus found |
| ClamAV | 0.91 | 2007.08.14 | no virus found |
| DrWeb | 4.33 | 2007.08.15 | VBS.PackFor |
| eSafe | 7.0.15.0 | 2007.08.10 !!!!! | no virus found |
| eTrust-Vet | 31.1.5058 | 2007.08.14 | no virus found |
| Ewido | 4.0 | 2007.08.14 | no virus found |
| FileAdvisort | 1 | 2007.08.15 | no virus found |
| Fortinet | 2.91.0.0 | 2007.08.15 | JS/WebAttacker!exploit |
| F-Prot | 4.3.2.48 | 2007.08.14 | no virus found |
| F-Secure | 6.70.13030.0 | 2007.08.15 | Trojan-Downloader.JS.Psyme.hu |
| Ikarus | T3.1.1.12 | 2007.08.14 | Trojan-Downloader.JS.Psyme.hu |
| Kaspersky | 4.0.2.24 | 2007.08.15 | Trojan-Downloader.JS.Psyme.hu |
| McAfee | 5097 | 2007.08.14 | JS/Downloader-AUD |
| Microsoft | 1.2704 | 2007.08.15 | TrojanDownloader:JS/Psyme.gen |
| NOD32 | 2461 | 2007.08.15 | no virus found |
| Norman | 5.80.02 | 2007.08.14 | JS/Laume.gen2 |
| Panda | 9.0.0.4 | 2007.08.14 | no virus found |
| Prevx1 | V2 | 2007.08.15 | no virus found |
| Rising | 19.36.01.00 | 2007.08.15 | no virus found |
| Sophos | 4.20.0 | 2007.08.12 !!! | Mal/ObfJS-A |
| Sunbelt | 2.2.907.0 | 2007.08.14 | no virus found |
| Symantec | 10 | 2007.08.15 | no virus found |
| TheHacker | 6.1.7.168 | 2007.08.14 | Trojan/Downloader.vbs |
| VBA32 | 3.12.2.2 | 2007.08.14 | no virus found |
| VirusBuster | 4.3.26:9 | 2007.08.14 | JS.Psyme.DD.Gen |
| Webwasher-Gateway | 6.0.1 | 2007.08.14 | JS.WebAttacker.gen (suspicious) |
|
| | |