Jinshan anti-Virus 20041212_ daily _ Internet surfing

Beijing Information Security Evaluation Center, Jinshan Poison PA jointly released the December 12, 2004 popular virus.

Today, users are reminded to pay special attention to the following viruses: "De le" (worm.dedler.u) and "Icmdserver" (Win32.Hack.iCmdServer).


"De le" worm, the virus spread through the mail, the virus will bring users a serious system security degradation, some security sites can not log in, the machine is controlled by hackers and other major threats.
"Icmdserver" hacker tool, which opens the Telnet service on the user's machine, which can be used by a malicious attacker to control the user's machine.




First, "De le" (worm.dedler.u) Threat Level: ★

According to Jinshan Poison PA Anti-Virus engineer analysis, this is a transmission through the mail worm virus. When the virus occurs, it shuts down services that are turned on by some anti-virus software, blocks some anti-virus web sites, makes the user unable to log in, connects to the login.icq.com through TCP 5190 ports, waits for the commands sent by the hacker, collects mail addresses locally and makes the virus an accessory, Sends a message to the recipient of the message. The virus will give users a serious system security degradation, some security sites can not log in, the machine is controlled by hackers and other major threats.
Jinshan Poison Bully Antivirus experts recommend users: to prevent mail viruses the best way is not to open the message with attachments easily, if you must open, please note the use of anti-virus software to detect and then open. Pay attention to the timely upgrade of anti-virus software to the latest version, at any time to open the message monitoring function, to develop a good sense of safety precautions.




Second, "Icmdserver" (Win32.Hack.iCmdServer) Threat Level: ★

According to Jinshan Poison bully anti-virus expert analysis, this is a hacker tool, when the virus is executed on the user's machine, will open Telnet service on the user's machine, the malicious attacker can use this service to control the user machine, and can execute any instruction. Jinshan Poison PA has been in the first time to deal with the virus, please do a good job of virus library upgrade to prevent the virus intrusion.
Jinshan Poison Bully Anti-Virus experts remind users: the establishment of good security habits. Do not open a number of dubious messages and attachments, do not have some of the sites do not understand, do not perform the download from the Internet without anti-virus software processing files, these can ensure that your computer is more secure.



　　
Jinshan Poison PA Anti-Virus engineer reminds you: Please upgrade the poison PA to December 12, 2004 the virus library can completely handle the virus. If you do not install Jinshan poison PA, you can login to http://online.kingsoft.com/use Jinshan poison pa online search virus or Jinshan poison PA download version to prevent the virus intrusion.