Daily Virus Report (July 23, 2008) - Backdoor.Win32.RedGirl.cp
-
RISING
July 23, 2008 one virus needs your attention. It is CP（Backdoor.Win32.RedGirl.cp）. The virus spreads through malicious web stations, and the virus can drop and hide itself into IE process. And then, the virus will connect hackers at background; let hackers remote controlling the infected computer. It is a big threat to computer security safe.
Name: CP（Backdoor.Win32.RedGirl.cp）
Warning level: Dangerous
Category: Backdoor
Affected System:Windows NT/2000/XP/2003
Description:
This is a Backdoor program which written by VC++. Virus copies itself to system directory by own, create a startup application to startup with system. Then, virus will delete its files, startup IEXPLORE.EXE process at background. At the same time, virus will replace this process code with malicious code which comes from virus itself. So, virus can be hided and cheats computer users, and hackers can remote control infected computers. This virus is a big threat to computer users’ security safe.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Use Rising Vulnerability Check, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open auto-protect and auto-monitor function when accessing to the internet.
6. Put your account information of networks bank, networks game, MSN, QQ, Yahoo Messenger etc, into Rising Application Protection, Rising Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
