Daily Virus Report (Dec 8, 2008) - Backdoor.Win32.Gpigeon2008.tm
-
RISING
Dec 8, 2008 one virus needs your attention. It is TM(Backdoor.Win32.Gpigeon2008.tm). This virus spreads through Internet and steals computer users’ privacy information. The virus can remote control the infected computer, this threatens computer security safe seriously.
Name: TM (Backdoor.Win32.Gpigeon2008.tm)
Warning level: Dangerous
Category: Backdoor
Affected System: Windows NT/2000/XP/2003
Description:
After being executed, the virus copies its executable files down to Windows system directory, and set as hidden, system, read-only properties. Then, the virus creates system service process to achieve startup with system. And the virus creates new IE process and set it as hidden, then, drops itself into this process. The virus records user’s keyboard operation to steal computer user information, local system information, and other privacy; then, send the information to hackers. So, the victim device may remote controlled by hackers, and takes the following malicious behaviour without users acknowledge or consents: delete files, remote upload files, modify registry key value, and other malicious behaviour. This malicious virus threatens computer and privacy data security safe seriously.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Use Rising Vulnerability Check, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open auto-protect and auto-monitor function when accessing to the internet.
6. Put your account information of networks bank, networks game, MSN, QQ, Yahoo Messenger etc, into Rising Application Protection, Rising Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
