Daily Virus Report (Feb 21, 2009) - Backdoor.Win32.Gpigeon2007.csz
-
RISING
Feb 21, 2009 one virus needs your attention. It is CSZ (Backdoor.Win32.Gpigeon2007.csz). The virus spreads through Internet, and steals computer users’ private information. And the virus can remote control the infected computer, it threatens computer security safe seriously.
Name: CSZ (Backdoor.Win32.Gpigeon2007.csz)
Warning level: Dangerous
Category: Backdoor
Affected System: Windows NT/2000/XP/2003
Description:
This malicious program is Backdoor virus, and spreads through Internet. After being launched, this virus copies its executable files down to Windows system directory, and set as hidden, system, read-only properties. Then, the virus creates a new system service process to achieve startup with system. In addition, the virus creates new IE process and set it as hidden property, then, the virus drop itself into this process. The virus steals victim device user’s information, local system information, and other privacy by recording keyboard operation at background, then, sends the recorded information to hackers. Also, the virus can be remote controlled by hackers, and take the following malicious behaviour without computer users acknowledge or consents: delete files, remote upload files, modify registry key value, and so on. This malicious Backdoor virus threatens computer security safe seriously.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Internet Security or Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Install Rising PC Doctor, and choose “Leaks” function to check the leaks or vulnerabilities exist in your computer operation system, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open RISING Active Defense and Auto-Protect function when accessing to the internet.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
