Daily Virus Report (Dec 23, 2008) - Worm.Win32.QDH.a
-
RISING
Dec 23, 2008 one virus needs your attention. It is A (Worm.Win32.QDH.a). This malicious virus spreads through websites that take Hang CockHorse tech, shuts down Firewall of Windows system, modifies Date settings of Windows system, shuts down lots of antivirus software, and downloads and runs varieties Trojan virus to infected computer. This malicious virus threatens computer security safe seriously.
Name: A (Worm.Win32.QDH.a)
Warning level: Dangerous
Category: Worm
Affected System: Windows NT/2000/XP/2003
Description:
This is a Worm virus, and spreads through webpage which takes Hang CockHorse tech. the malicious virus shuts down the Firewall of Windows system, changes system time into September 22, 2001. And the virus extracts lots of virus files to Windows system and executes them; writes “autorun.inf” to each disk per 5 minutes; copies its executable files (yjppp.exe) to root directory of each disk. The malicious virus releases “Svchost.dll” and drops it into "Explorer.exe” to break down antivirus software and other security software. The virus accesses to “C:\down.dat” to download varieties Trojan virus, and sets auto restart through calculagraph. This malicious Worm threatens computer security safe seriously.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Use Rising Vulnerability Check, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open auto-protect and auto-monitor function when accessing to the internet.
6. Put your account information of networks bank, networks game, MSN, QQ, Yahoo Messenger etc, into Rising Application Protection, Rising Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection.