Jinshan anti-Virus 20041228_ daily _ Internet surfing

Beijing Information Security Evaluation Center, Jinshan Poison PA jointly released the December 28, 2004 popular virus.

Today remind users to pay special attention to the following viruses: "Legendary 2 Trojans" (WIN32.TROJ.PSWMIR2DLL) and "StartPage" (WIN32.TROJ.STARTPAGE.NK).

"Legendary 2 Trojan Horse" Trojan virus, the virus records the user's keyboard operation, stealing legendary 2 network game account password and other related information, and sent to the hands of Trojan growers.
"StartPage" Trojan virus, the virus modifies the machine's default home page, steals sensitive information that users keep on the computer, downloads virus files from designated websites, or injects virus code into infected machines remotely.



First, "Legendary 2 Trojans" (WIN32.TROJ.PSWMIR2DLL) Threat Level: ★

According to Jinshan Poison PA Anti-Virus engineers, this is the theft of legendary 2 Trojan horse release of the DLL, generally used to monitor keyboard messages, or take over network communications, and the sensitive information (such as account number, password) collected, sent to the Trojan collectors. This file is often accompanied by an EXE file. If you delete this file by hand, you may not be able to remove it completely, and you need to delete the executable program that called it.
Jinshan Poison Bully Anti-Virus experts remind users: with the development of computer science and technology, more viruses will accompany, in order to protect your system and personal information security, please constantly update the virus to poison the library, to prevent the invasion of the virus.



Second, "StartPage" (WIN32.TROJ.STARTPAGE.NK) Threat Level: ★

According to Jinshan Poison PA Anti-Virus engineer introduced, this is a vicious Trojan, the virus will copy itself to the system directory, and will load itself into the registry startup entry. The virus will be carried out on the infected machine: Modify the default home page for infected machines, steal sensitive information that users keep on their computers, download files and run them online, and hide their processes completely, making it difficult for users to detect virus processes; Try to inject virus code into some system processes by creating a remote thread. A system crash may be caused by an error in the system process.
Jinshan Poison Bully Anti-Virus experts remind users: with the development of the network, many viruses are accompanying, some viruses specifically steal the user's personal privacy, personal data information and so on, and the user's information disclosure or to create greater harm to users, please enhance their own security awareness, more access to the Poison Tyrant website related security information, Do your own safe work, to avoid the virus to bring you trouble.




Jinshan Poison PA Anti-Virus engineer reminds you: Please upgrade the poison PA to December 28, 2004 the virus library can completely handle the virus. If you do not install Jinshan poison PA, you can login to http://online.kingsoft.com/use Jinshan poison pa online search virus or Jinshan poison PA download version to prevent the virus intrusion.