Jinshan Poison PA: New remote control Trojan one by the space on the trigger should be immediately killing

Netizen Small Z Help: "A press space on the report load Twain32.dll error, keyboard can not use." "November 16, Jinshan poison bully cloud security capture to a class of remote control Trojans, Trojans to create shortcuts to use the space as a shortcut key, press a space, Trojan horse on the execution." When the Trojan program is deleted by some anti-virus software, press the space will immediately error.

Figure 1 after the simple deletion of the virus file, press the blanks to immediately correct the error

Jinshan Poison PA Safety experts pointed out that this new type of remote control Trojan parasitic in some popular games cracked patches or game modifier, the Disseminator claimed that the game to crack tools or game modifier will be anti-virus software false positives, to run the anti-virus software must be shut down.

This description is easy to break through the psychological defense of the game, if the player shuts down antivirus software after the so-called "game modifier or crack tool." A remote control Trojan will run immediately, the virus will also create a shortcut, use the SPACEBAR to run the shortcut.

Figure 2 Virus created shortcut, visible by space can cause virus program to run

Jinshan Poison PA Safety experts pointed out that any modification of the system startup behavior will trigger the anti-virus software alarm, virus creators to create this shortcut, with the space bar to start the virus, can escape the anti-virus software detection. Only when the user knocks on the SPACEBAR will the remote control Trojan run.

Part of the anti-virus software in processing the virus, only to remove the virus execution file, and did not delete the shortcut created by the virus. Poisoning when the user presses the SPACEBAR, it immediately reports "error loading Twain32.dll." Because the ultimate goal of the virus is to remotely control the user's computer, the player is facing great danger. The proposal found that press the space bar abnormal users immediately use Jinshan poison pa powerful killing.

Figure 3 Jinshan Poison PA can completely clear the remote control Trojan