Jinshan anti-Virus 20050102_ daily _ Internet surfing

Beijing Information Security Evaluation Center, Jinshan Poison PA jointly released the January 02, 2005 popular virus.

Today, users are reminded to pay special attention to the following viruses: "Bugs" (worm.dipnet.b) and "Afcore" (WIN32.HACK.AFCORE.BT).

"Bug" worm, the worm spread through the LAN, the file name of the virus is very deceptive, the virus opens a specified port to communicate with the outside, will give the user's system and the security of personal data information poses a serious threat.
"Afcore" hacker tool, the virus is running, the virus will be infected with a series of illegal operation of the machine, the security of the user system and confidential documents, the virus also use this poison machine as a springboard to attack other local area network machines.



First, "Bug" (worm.dipnet.b) Threat Level: ★

According to Jinshan Poison PA Anti-Virus engineer analysis, this is a transmission through the LAN worm virus. The virus will copy itself to the system directory and the shared directory within the local area network, the file name of the virus consists of randomly generated 3 lowercase English letters, is highly deceptive. The virus also deletes itself and registers itself as a system service, opening TCP 445 ports to communicate with the outside world, which poses a threat to all user information.
Jinshan Poison Bully Anti-Virus experts remind users: the establishment of good security habits. Do not open a number of dubious messages and attachments, do not have some of the sites do not understand, do not perform the download from the Internet without anti-virus software processing files, these can ensure that your computer is more secure.



Second, "Afcore" (WIN32.HACK.AFCORE.BT) Threat Level: ★

According to Jinshan Poison PA Anti-Virus engineer analysis, the virus is a file name is a random DLL file, may be released by the virus EXE file or because of access to malicious Web site infection, the virus by registering as Internet Explorer bho (Browser Helper Object) component, and the virus runs with an IE browser each time it is opened. Viruses can do the following things: Create, delete, list cookies, manipulate clipboard contents, steal user system information, run specified programs, manipulate desktop windows, monitor network packets, and broadcast messages to computers on the LAN, and hack into some internet cafes to manage software and make it a puppet of viruses; lock, log off, close, Reboot the computer, attack other computers through the infected computer, and so on.
Jinshan Poison bully Anti-Virus experts to remind users: the development of the network, the user's computer is also a serious problem of hacker attacks, many network viruses have used the hacker's method to attack the user's computer, so users should also install personal firewall software to prevent black.



　　
Jinshan Poison PA Anti-Virus engineer reminds you: Please upgrade the poison PA to January 02, 2005 The virus library can completely handle the virus. If you do not install Jinshan poison PA, you can login to http://online.kingsoft.com/use Jinshan poison pa online search virus or Jinshan poison PA download version to prevent the virus intrusion.