Daily Virus Report (Dec 10, 2008) - Worm.Win32.Autorun.faa
-
RISING
Dec 10, 2008 one virus needs your attention. It is FAA (Worm.Win32.Autorun.faa). This malicious virus spreads through U Flash Disk and other mobile device. This virus gets Dual-Process protection function, and downloads varieties Trojan to victim device. This malicious virus threatens computer security safe.
Name: FAA (Worm.Win32.Autorun.faa)
Warning level: Dangerous
Category: Worm
Affected System: Windows NT/2000/XP/2003
Description:
This is a Worm program, which spreads through U Flash Disk and other mobile device. After being executed, the virus creates ‘svchost.exe’ application and extracts ‘winlogon.exe’ file to Windows system directory; then, the virus start up the two applications. This virus gets Dual-Process protection tech, if there is one application is ended, the other application will execute 'shutdown.exe’ to escape from antivirus software’s check or scan. The virus writes ‘svchost.exe’ and ‘autorun.inf’ file to each disk with a special period around, and this makes virus spreading in victim devices and mobile devices. The virus modifies registry key value to achieve startup with Windows system start. Finally, the virus downloads varieties Trojan to infected computer and run these viruses in victim device. This malicious Worm threatens computer security safe.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Use Rising Vulnerability Check, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open auto-protect and auto-monitor function when accessing to the internet.
6. Put your account information of networks bank, networks game, MSN, QQ, Yahoo Messenger etc, into Rising Application Protection, Rising Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
