VirusW32/EoRezo.BH
Analysis
W32/EoRezo.BH is classified as a file infector.
A file infector is a type of malware that has the capability to propagate by attaching its code to other programs or files.
The Fortinet Antivirus Analyst Team is constantly updating our descriptions. Please check the FortiGuard Encyclopedia regularly for updates.
Recommended Action
- Make sure that your FortiGate/FortiClient system is using the latest AV database.
- Quarantine/delete files that are detected and replace infected files with clean backup copies.
Telemetry
Detection Availability
| FortiGate | |
|---|---|
| Extreme | |
| FortiClient | |
| Extended | |
| FortiMail | |
| Extended | |
| FortiSandbox | |
| Extended | |
| FortiWeb | |
| Extended | |
| Web Application Firewall | |
| Extended | |
| FortiIsolator | |
| Extended | |
| FortiDeceptor | |
| Extended | |
| FortiEDR |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-11-05 | 72.85300 | Sig Updated |
| 2019-10-24 | 72.56300 | Sig Updated |
| 2019-10-20 | 72.46400 | Sig Updated |
| 2019-10-19 | 72.45300 | Sig Updated |
| 2019-10-19 | 72.44900 | Sig Updated |
| 2019-10-19 | 72.43800 | Sig Updated |
| 2019-10-18 | 72.43000 | Sig Updated |
| 2019-10-17 | 72.39700 | Sig Updated |
| 2019-10-10 | 72.24000 | Sig Updated |
| 2019-10-08 | 72.18500 | Sig Updated |