Daily Virus Report (Oct 28, 2008) - Backdoor.Win32.Ceckno.ta
-
RISING
Oct 28, 2008 one virus needs your attention. It is TA (Backdoor.Win32.Ceckno.ta). The virus spreads through Internet; records and sends keyboard operation information to hackers. This virus can steal the account information and password of personal E-mail, net bank, and net game. The infected computer may remote controlled by hackers, and this makes computer security safe facing big threat.
Name: TA (Backdoor.Win32.Ceckno.ta)
Warning level: Dangerous
Category: Backdoor
Affected System: Windows NT/2000/XP/2003
Description:
This is a backdoor virus and spread through Internet. After been executed, the virus creates a process which is named as ‘netservice.exe’ in C:\WINDOWS directory, and creates a virus file with name of ‘sysns.dll’ in C:\WINDOWS\system32. And the virus modifies registry to achieve startup with system. Also, the virus records and sends computer users’ keyboard operation information to hackers, so the hackers can steal users’ e-mail account, password of net bank, password of net game and other private information; this makes computer users suffer. In addition, hackers can remote control the infected computer, and upload virus or download important files of the infected computer without users’ knowledge or consent; this threatens computer security safe.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Use Rising Vulnerability Check, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open auto-protect and auto-monitor function when accessing to the internet.
6. Put your account information of networks bank, networks game, MSN, QQ, Yahoo Messenger etc, into Rising Application Protection, Rising Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
