Daily Virus Report (Oct 2nd, 2008) - Trojan.PSW.Win32.ZhuXian.im
-
RISING
Oct2nd, 2008 one virus needs your attention. It isIM (Trojan.PSW.Win32.ZhuXian.im).The virus spreads through Internet, and records key board operation of the logon operation of the online game: QQ Three Kingdoms. Then, the virus sends the record to hackers. It seriously threatens account information safe of QQ Three Kingdoms game players.
Name: IM (Trojan.PSW.Win32.ZhuXian.im)
Warning level: Dangerous
Category: Trojan
Affected System: Windows NT/2000/XP/2003
Description:
This is an account stealer Trojan. Virus copies its lpsgajba.exe, apsgejba.dll, gpsgahba.sys files down to system directory after startup, and modifies registry to achieve startup with system. And the virus shuts down QQ Doctor Process to prevent from check and clean. In additional, the virus searches the logon window of QQ Three Kingdoms game, then, records keyboard operation of this logon window. And the virus sends records to hackers appointed e-mail box or website, makes online game player suffer.
Anti-virus experts suggest that computer users take the following measures to protect against this virus:
1. Install Rising Anti-virus, personal firewall, update in time, and at least 3 times per day for updating Rising.
2. Use Rising Vulnerability Check, patch your computer system in a timely manner as many viruses spread by taking advantage of the system exploits or vulnerabilities.
3. Do not browse suspicious websites, and suspicious inserter; turn off or delete unnecessary system services.
4. Do not receive the suspicious file from QQ, MSN, Email, etc.
5. Open auto-protect and auto-monitor function when accessing to the internet.
6. Put your account information of networks bank, networks game, MSN, QQ, Yahoo Messenger etc, into Rising Application Protection, Rising Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection.
Daily Virus Report (Feb 07, 2012)- Rootkit.Win32.Undef.cvu ()
