Daily Virus Report (Mar 26, 2009) - Worm.Win32.Auto.rvt
-
RISING
Mar 26, 2009 one virus needs your attention. It is RVT (Worm.Win32.Auto.rvt). This malicious virus spreads through Internet; shuts down more than ten kinds of security software; and downloads varieties of Trojans to local device. It is difficult to be cleaned.
Name: RVT (Worm.Win32.Auto.rvt)
Warning level: Dangerous
Category: Worm
Affected System: Windows NT/2000/XP/2003
Description:
This malicious Worm program spreads through Internet. After being executed, the virus copies its executable files down to ‘c:\Program Files’ with name as ‘lm.pif’; then the virus releases file ‘mp.dll’ at the root directory, releases driver file ‘lmmt.sys’ at the directory of ‘c:\WINDOWS\Fonts’. Then, the virus creates startup option to achieve being launched with system, ending antivirus program to preventing from security checking and scanning. The virus creates ‘AUTORUN.INF’ file at each computer disk; while user of infected computer open any disk by ‘double click’, the virus will be executed. Finally, the virus releases ‘aaaamon.dll’ file down to the directory of system32; then the virus downloads varieties of viruses to infected computer via this malicious file and, this malicious behavior renew viruses which exist in the infected computer. This malicious Worm program threatens computer security seriously.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Internet Security or Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Install Rising PC Doctor, and choose “Leaks” function to check the leaks or vulnerabilities exist in your computer operation system, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open RISING Active Defense and Auto-Protect function when accessing to the internet.
Daily Virus Report (Feb 06, 2012)- Trojan.Win32.Fednu.ual ()
