Jinshan anti-Virus 20041226_ daily _ Internet surfing

Beijing Information Security Evaluation Center, Jinshan Poison PA jointly released the December 26, 2004 popular virus.

Today, users are reminded to pay special attention to the following viruses: "Lmir" (WIN32.HLLP.LMIR.A) and "Pswlmir" (Win32.Troj.PSWLmir.kj).

"Lmir" companion virus, the virus specifically steals legendary game account password and other information, and infection executable files. The virus attempts to reduce the security of the system by shutting down some common anti-virus programs in a way that enumerates multiple processes.
"Pswlmir" Trojan virus, the virus will close the operation of some security software, steal legendary game account password and other information, at the same time, the virus can also infect executable files.



First, "Lmir" (WIN32.HLLP.LMIR.A) Threat Level: ★

According to Jinshan Poison PA Anti-Virus engineer introduced, this is an infected infection and generated by the associated virus, it can steal legendary game account information, and infected executable files. The virus will first attempt to use a variety of processes to enumerate the way to turn off some common virus firewalls and some Trojans. Register yourself as a background service under Win9x and hide your own process. The virus infects the uninfected size of the appropriate executable program, writes itself to the front of the executable program, and runs the virus first when it runs the infected program. The virus records mouse and keyboard messages, intercepts the user's legendary account information, and sends these account information to the Trojan grower's intended mailbox.
Jinshan Poison Bully Anti-Virus experts remind users: please do not easily run from the Internet after downloading without anti-virus software processing files, it is strongly recommended that you use the latest virus library of the poison PA to scan, and then decide whether to run.



Second, "Pswlmir" (Win32.Troj.PSWLmir.kj) Threat Level: ★

According to Jinshan Poison PA Anti-Virus engineer introduced, this is a theft legendary game account information virus, at the same time, the virus infected executable files. The virus first shuts down some anti-virus software and infects an executable program of the appropriate size, which is the first to run when the infected program runs. The virus hooks up the system's mouse and keyboard messages, intercepts the user's legendary password and so on, and sends the resulting information to the specified mailbox quickly.
Jinshan Poison bully Anti-Virus experts to remind users: the current theft of user games, instant messaging tools, such as password information frequently appear, please users must strengthen security precautions to avoid causing you loss.



Jinshan Poison PA Anti-Virus engineer reminds you: Please upgrade the poison PA to December 26, 2004 the virus library can completely handle the virus. If you do not install Jinshan poison PA, you can login to http://online.kingsoft.com/use Jinshan poison pa online search virus or Jinshan poison PA download version to prevent the virus intrusion.