Intraday malicious virus program: Trojan.DL.Win32.Edog.ab

Behavior:
This is a malicious Trojan virus program.
After being executed, the virus program shall replace normal Windows operating system files with its malicious executable files; so the virus program will be able to be executed while users turning on the infected computers. Also, the virus program shall shut down antivirus software and security tools on infected computers, and remove protection of IE browser which loaded by antivirus and security tools of infected devices. And then, via IE browser, this virus program can get upgrade by accessing to the websites which specified by hackers.

Statistics:
RISING Cloud Security reported:
August 3rd, 2010 there were 2,066,085 devices got malicious attack via malicious Webpage Horse Hanging tech, and RISING Virus Lab has intercepted 103,918 malicious hyperlinks with webpage Horse Hanging tech. And Rising Cloud Security got 60,098 reports from end users.

Top5 Infected Website:
1, top.jschina.com.cn/forumdisplay.php?fid=7&sid=DDhWym
with malicious hyperlink: **. cn/shumen/duke.htm, etc.
2, www.dragontv.cn/data/tlbb/tl2010191710431.html
with malicious hyperlink: **com:8081/user/inc/tl/ie.html?x, etc.
3, www.okzhuhai.com/plus/news/17584.html
with malicious hyperlink: **cn/css/zz.html, etc.
4, shss.dlut.edu.cn/nul.show.asp?dy=210063385
with malicious hyperlink: ** org:6677/m/index.html, etc.
5, www.cavtc.edu.cn/news/html/200712/com1/(&$'='$&)./kb.aux.asp?1521.html
with malicious hyperlink: **com/html/zx/ie.html, etc.

Notice: the symbol ‘*’ means a stochastic letter or number.

Solutions:
1. Install Rising Internet Security, or Rising Antivirus plus Rising Firewall, and get update in time.
2. Install Rising PC Doctor, and choose “Leaks” function to check the leaks or vulnerabilities exist on your computer operating system, patch your computer system in a timely manner because many viruses spread by taking advantage of Windows operating system vulnerabilities.
3. Do not browse suspicious websites, and do not run suspicious plugins; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open RISING Active Defense and Auto-Protect function while accessing to Internet.

*You can buy RISING Security products here or free download to try.
*If you have any questions about RISING products, please visit Rising support centre for help.