Daily Virus Report (Feb 25, 2009) - Worm.Win32.DownLoader.nx
-
RISING
Feb 25, 2009 one virus needs your attention. It is NX (Worm.Win32.DownLoader.nx). This malicious virus takes variety methods to shut down much popular antivirus software to escape from scanning and checking. This virus link to an appointed websites to download varieties Trojan to infected device; this virus is difficult to be cleaned.
Name: NX (Worm.Win32.DownLoader.nx)
Warning level: Dangerous
Category: Worm
Affected System: Windows NT/2000/XP/2003
Description:
After being executed, the virus set its properties as hidden, and copies its executable files down to "C:\Windows\System32\keepSafe.exe”; then get startup. The virus shuts down some security software and their processes by sending window message. While there is an active defense message of security software, the virus will click “Next” without computer user’s consent; this makes the virus away from security software’s check and scan. The virus modifies registry hijack option, add the path of security software; this makes security software can not being loaded. The virus adds multi auto-run option to get startup with computer power on. Also, the virus accesses to hackers’ appointed website to download viruses, and run these viruses at the infected local device. This makes the virus is difficult to be cleaned.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Internet Security or Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Install Rising PC Doctor, and choose “Leaks” function to check the leaks or vulnerabilities exist in your computer operation system, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open RISING Active Defense and Auto-Protect function when accessing to the internet.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
