Daily Virus Report (June 7, 2008) - Trojan.PSW.Win32.GameOL. nty
-
RISING
June 7, 2008 one virus needs your attention. It is NTY (Trojan.PSW.Win32.GameOL. nty). This is a virus which steals game player account information. The virus will drop itself into Explorer.Exe process, and search local game process, record the game account number and password information and send to a website address which hackers appointed.
Name: NTY (Trojan.PSW.Win32.GameOL. nty)
Warning level: Dangerous
Category: Trojan
Affected System: Windows NT/2000/XP/2003
Description:
This is a virus which steals game player account information. The virus will release ayTQQTQQ1011.exe and ayTQQTQQ1011.dll file into System32 directory after startup. Then, virus will edit registry to achieve startup with system. And the virus will add dynamic library into Explorer.Exe process, and search local game process. If the virus finds a game process, it will drop into the game process, record the game account number and password information, and then send to a website address which hackers appointed. After finishing these behavior, the virus will delete itself by own, to escape from anti-virus software scan.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Use Rising Vulnerability Check, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open auto-protect and auto-monitor function when accessing to the internet.
6. Put your account information of networks bank, networks game, MSN, QQ, Yahoo Messenger etc, into Rising Application Protection, Rising Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
