Virus:TR/Crypt.CFI.Gen2
Date discovered:05/03/2007
Type:Trojan
In the wild:Yes
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low
Static file:No
Engine version:7.03.01.40

 Special detection  TR/Crypt.CFI.Gen2

Description:
A generic detection routine designed to detect common family characteristics shared in several variants.

This special detection routine was developed in order to detect unknown variants and will be enhanced continuously.


Version history:
The following engine updates were released in order to enhance detection:

   •  7.03.01.40   ( 05/03/2007 )
   •  7.04.00.34   ( 19/06/2007 )
   •  7.04.00.37   ( 28/06/2007 )
   •  7.04.00.39   ( 05/07/2007 )
   •  7.04.00.44   ( 18/07/2007 )
   •  7.04.00.50   ( 25/07/2007 )
   •  7.06.00.20   ( 04/10/2007 )
   •  7.06.00.27   ( 18/10/2007 )
   •  7.06.00.30   ( 26/10/2007 )
   •  7.06.00.34   ( 06/11/2007 )
   •  7.06.00.40   ( 07/12/2007 )
   •  7.06.00.45   ( 13/12/2007 )
   •  7.06.00.53   ( 24/01/2008 )
   •  7.06.00.67   ( 14/02/2008 )
   •  7.06.00.73   ( 29/02/2008 )
   •  7.06.00.78   ( 28/03/2008 )
   •  7.06.00.84   ( 10/04/2008 )
   •  7.08.00.10   ( 25/04/2008 )
   •  7.08.00.58   ( 19/06/2008 )
   •  7.08.00.64   ( 02/07/2008 )
   •  7.08.00.68   ( 15/07/2008 )
   •  7.08.01.34   ( 18/09/2008 )
   •  7.09.00.07   ( 23/10/2008 )
   •  7.09.00.29   ( 07/11/2008 )
   •  7.09.00.41   ( 04/12/2008 )
   •  7.09.00.45   ( 11/12/2008 )
   •  7.09.00.54   ( 09/01/2009 )
   •  7.09.00.57   ( 16/01/2009 )
   •  7.09.00.60   ( 22/01/2009 )
   •  7.09.00.70   ( 30/01/2009 )
   •  7.09.00.79   ( 13/02/2009 )
   •  7.09.00.83   ( 17/02/2009 )
   •  7.09.00.93   ( 26/02/2009 )
   •  7.09.00.105   ( 05/03/2009 )
   •  7.09.00.120   ( 18/03/2009 )
   •  7.09.00.126   ( 24/03/2009 )
   •  7.09.00.138   ( 03/04/2009 )
   •  7.09.00.148   ( 17/04/2009 )
   •  7.09.00.156   ( 24/04/2009 )
   •  7.09.00.166   ( 08/05/2009 )
   •  7.09.00.187   ( 11/06/2009 )
   •  7.09.00.191   ( 17/06/2009 )
   •  7.09.00.199   ( 26/06/2009 )
   •  7.09.00.215/8.02.00.215   ( 14/07/2009 )
   •  7.09.00.220/8.02.00.220   ( 16/07/2009 )
   •  7.09.01.33/8.02.01.33   ( 03/10/2009 )
   •  7.09.01.50/8.02.01.50   ( 28/10/2009 )
   •  7.09.01.88/8.02.01.88   ( 30/11/2009 )
   •  7.09.01.102/8.02.01.102   ( 07/12/2009 )
   •  7.09.01.134/8.02.01.134   ( 08/01/2010 )
   •  7.09.02.04/8.02.02.04   ( 02/06/2010 )
   •  7.09.04.32/8.02.04.32   ( 29/07/2010 )
   •  7.09.04.98/8.02.04.98   ( 12/11/2010 )

 File details Runtime packer:
In order to aggravate detection and reduce size of the file it is packed with a runtime packer.


Encryption:
Encrypted - The virus code inside the file is encrypted.

Description inserted by Andrei Ivanes on Thursday, July 1, 2010
Description updated by Andrei Ivanes on Thursday, December 23, 2010

Back . . . .