Jinshan anti-Virus 20041214_ daily _ Internet surfing

Beijing Information Security Evaluation Center, Jinshan Poison PA jointly released the December 14, 2004 popular virus.

Today remind users to pay special attention to the following viruses: "Marsland" (worm.maslan.b) and "Love You" (worm.iloveyou.1).

"Marsland" worm, the virus is spread through the mail, the virus in the local machine to collect e-mail addresses, skip with the word of the security site e-mail address, so as to avoid being intercepted by anti-virus vendors, and then the virus as an attachment to send to the recipient of the message.
"Love You" worm, the virus will terminate the process of some of the security software, and then search the e-mail address in Outlook, send itself as an attachment.




First, "Marsland" (worm.maslan.b) Threat Level: ★

According to Jinshan Poison PA Anti-Virus engineer analysis, this is a transmission through the mail worm virus. The virus occurs when the path with share, Setup, distr, download these four words pif, exe, RAR, zip file backup, and virus files to overwrite the original files. To enable the virus to boot, the virus writes a registry startup entry every 20 seconds. The virus collects mail addresses on local machines and skips email addresses with the word "secure" websites, to avoid being intercepted by antivirus vendors, and then sending the virus as an attachment to the recipient.
Jinshan Poison Bully Anti-Virus engineer to remind users: the best way to prevent mail viruses is not easy to open with the attachment of unfamiliar messages, if you must open, please note the use of anti-virus software detection and then open. Pay attention to the timely upgrade of anti-virus software to the latest version, at any time to open the message monitoring function, to develop a good sense of safety precautions.




Second, "Love You" (worm.iloveyou.1) Threat Level: ★

According to Jinshan Poison fighter Anti-Virus engineer analysis, the worm appears as a folder icon, confusing users to open, the virus will quietly run in the background. The virus copies itself to multiple directories in the system, named: I love You.exe. and generates three files in each writable disk root directory, allowing the user to activate the virus as soon as the disk is opened. The virus loads itself into the registry's startup entry and modifies the registry so that the File Manager does not display hidden files and file extensions, making it more difficult for users to detect the presence of the virus. The virus terminates some anti-virus software and then searches for the e-mail address in Outlook, sending itself as an attachment.
Jinshan Poison Bully Anti-Virus experts recommend users: with the development of computer science and technology, more viruses will accompany, in order to protect your system and personal information security, please constantly update the poison PA's virus library, to prevent the invasion of the virus.




Jinshan Poison PA Anti-Virus engineer reminds you: Please upgrade the poison PA to December 14, 2004 the virus library can completely handle the virus. If you do not install Jinshan poison PA, you can login to http://online.kingsoft.com/use Jinshan poison pa online search virus or Jinshan poison PA download version to prevent the virus intrusion.