Daily Virus Report (Oct 10, 2008) - Worm.Win32.CnVampire.j
-
RISING
Oct 10, 2008 one virus needs your attention. It is J (Worm.Win32.CnVampire.j). This is a Worm and the virus spreads through multiple channels. The virus can shut down varieties of antivirus and security tools. The virus downloads varieties of viruses; breaks down system files and, the operation system will face serious security threat in case of being infected by this virus.
Name: J (Worm.Win32.CnVampire.j)
Warning level: Highly Dangerous
Category: Worm
Affected System:Windows NT/2000/XP/2003
Description:
This is a Worm and spreads through U Flash Disk, LAN Weak Password Attack, Website Hang CockHorse Tech, and other methods. The virus releases ’install.bat’ file in %systemroot%\Tasks\ directory; creates ini directory under system directory, and named itself ‘ini.exe’ in ini directory. Then, the virus creates a script file with name ‘shit.vbs’ to run ‘ini.exe’. And the virus will browse all directories and release a virus named ‘wsock32.dll’ at each directory. The virus modifies registry to achieve startup with system, and shuts down varieties of popular antivirus software and security tools to prevent from scan and check. Also, virus modifies hosts file, and add many malicious address link in it. In case of being infected by this virus, computer operation system will face serious security threat.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Use Rising Vulnerability Check, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open auto-protect and auto-monitor function when accessing to the internet.
6. Put your account information of networks bank, networks game, MSN, QQ, Yahoo Messenger etc, into Rising Application Protection, Rising Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
