Jinshan anti-Virus 20041222_ daily _ Internet surfing

Beijing Information Security Evaluation Center, Jinshan Poison PA jointly released the December 22, 2004 popular virus.

Today, users are reminded to pay special attention to the following viruses: "Elves" (Win32.Troj.Casper) and "Heaven Fire" (Win32.Troj.T2yuhuo).


"Wizard" Trojan virus, the virus spread through the mail, the message content for Japanese text, its attachment for photo photos to entice users to run. After running, the virus records the keyboard information of the infected machine.
"Heaven Fire" Trojan virus, the virus for Heaven 2 network game theft Trojan. The virus hides itself, steals the player's game account password and so on equipment, and sends through the mail to the Trojan horse grower place.



First, "Genie" (Win32.Troj.Casper) Threat Level: ★

According to Jinshan Poison fighter Anti-Virus engineer analysis, the virus spread through the mail, the message content for Japanese text, its attachment for photo photos, in order to entice users to run. When the user runs the mail attachment, it prompts to extract where it is, and the virus is released and running. The virus will record the infected machine's keyboard information, theft of user confidential documents, Jinshan Poison PA has done the virus has been handled, please update their own virus library.
Jinshan Poison Bully Anti-Virus experts remind users: with the development of the network, many viruses are accompanying, some viruses specifically steal the user's personal privacy, personal data information and so on, and the user's information disclosure or to create greater harm to users, please enhance their own security awareness, more access to the Poison Tyrant website related security information, Do your own safe work, to avoid the virus to bring you trouble.



Second, "Heaven Fire" (Win32.Troj.T2yuhuo) Threat Level: ★

According to Jinshan Poison PA anti-virus engineer introduced, the Virus for Heaven 2 network game Theft Trojan Horse. The virus will end some of the security software process, the system for Win9x call the Registerprocessservice function to register itself as a service, so as to hide their own process. Through email to the stolen account sent to the hands of the Trojan growers. Trojan in the mail will be sent to the network, please do not poison PA and other anti-virus software when the use of network, such as Dart firewall to intercept the unknown Program Access network.
Jinshan Poison bully Anti-Virus experts to remind users: in the domestic network games in full swing after the emergence of various game viruses will breed spread, players must do a good job related virus prevention, to avoid causing significant losses.
　　


Jinshan Poison PA Anti-Virus engineer reminds you: Please upgrade the poison PA to December 22, 2004 the virus library can completely handle the virus. If you do not install Jinshan poison PA, you can login to http://online.kingsoft.com/use Jinshan poison pa online search virus or Jinshan poison PA download version to prevent the virus intrusion.