Daily Virus Report (Mar 22, 2009) - Worm.Win32.Autorun.fhs
-
RISING
Mar 22, 2009 one virus needs your attention. It is FHS (Worm.Win32.Autorun.fhs). This malicious virus spreads through U Flash Disk and other mobile device; shuts down more than ten kinds of security software; and download varieties Trojans to local device. It is difficult to be cleaned.
Name: FHS (Worm.Win32.Autorun.fhs)
Warning level: Dangerous
Category: Worm
Affected System: Windows NT/2000/XP/2003
Description:
This malicious Worm program spreads through U disk, mobile devices and Internet. After being executed, the virus will check system process to make sure that only this malicious program existed in system. Then, the virus releases a “dll?.tmp” file in temp folder; then replaces system files; also the virus releases malicious driver to control disk. The virus can shut down or break more than ten kinds of security software by methods as: scan process, end service, delete files, mirror hijack, close window, etc; this can prevent the virus program from scan and check of security software. The virus writes “JC.PIF” and “AUTORUN.INF” to each disk to achieving startup with startup of disk. Finally, the virus downloads Trojans according with the content of ‘http://d.****.com/tt.txt’, and renews itself according to ‘http://d.****.com/tt.txt’. It is difficult to be cleaned.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Internet Security or Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Install Rising PC Doctor, and choose “Leaks” function to check the leaks or vulnerabilities exist in your computer operation system, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open RISING Active Defense and Auto-Protect function when accessing to the internet.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
