Jinshan anti-Virus 20041220_ weekly _ Internet surfing

Jinshan anti-Virus weather (December 20, 2004 to December 26)

Jinshan Anti-Virus Emergency Center this week to upgrade the package update, please quickly to Jinshan poison PA website db.kingsoft.com Download Upgrade package, the following is a brief introduction of several important viruses:

　　
Focus this week on viruses:

　　
First, hacker program: "Delf" (Win32.Hack.Delf) Threat Level: ★

According to Jinshan Poison fighter Anti-Virus engineer analysis, the virus first created an event to prevent multiple instances of the virus running simultaneously, copy itself to the system directory, and load itself into the registry of the startup items, and then open a random port waiting for hackers to connect. The virus will go to the specified IP and port to download files Cssddan.exe and run, causing the machine to infect a virus. The virus will pass a password table that is brought in by itself, brute force to crack a remote host, copy itself directly to some of the remote host's default shared directory, if the replication succeeds, will be a remote add task debugging, so that the virus on the remote host automatically run, so will infect more host, make LAN paralyzed. The virus also kept the thread of some IP segment of the 445 Port SYN attack, resulting in the exhaustion of the machine resources and collapse.
Jinshan Poison Bully Anti-Virus experts recommend users: the development of the network, the user's computer is also a serious problem of hacker attacks, many network viruses have used the hacker's method to attack the user's computer, therefore, users should also install personal firewall software to prevent black.




Second, Trojan: "Password Monitor" (Win32.Troj.Happyshy) Threat Level: ★

According to Jinshan poison bully anti-virus experts introduced, the Trojan will steal the Chinese Game Online center account password, and the Trojan growers designated mailbox. Trojan in the mail will be sent to the network, please do not poison PA and other anti-virus software when the use of network, such as Dart firewall to intercept the unknown Program Access network.
Jinshan Poison Bully Anti-Virus experts remind users:
1, the establishment of good security habits, do not open suspicious mail and suspicious sites;
2, close or delete the system does not need services;
3, a lot of viruses to use the spread of vulnerability, must be timely to the system to play patches;
4, the installation of professional anti-virus software for real-time monitoring, at ordinary times when the Internet must turn on anti-virus software real-time monitoring functions.



Jinshan Poison PA Anti-Virus engineer reminds you: the above two virus upgraded to December 20 virus library can be fully processed. Jinshan Poison tyrants every weekday virus updates, please at any time to do the virus library upgrade work, to ensure that your system security. If you do not install Jinshan poison PA users, you can log into the http://db.kingsoft.com use Jinshan poison pa online search virus or Jinshan poison PA download version to prevent the virus intrusion.