[Reprinted] Rayman trojan also carries multiple "98" Virus File Names ″

Virus Information Archival:

========================================

 

Xinhuanet, Beijing, September 11, February 20, a camel Trojan download tool, CAP (Trojan. DL. win32.mnless. CAP) "the virus is worth noting this week. Its authors are a bit superstitious. Even the names of the released virus files are" 98989898 (when it is sent, it will be sent )", this virus will shut down a large number of anti-virus software and cause great damage to users by downloading various Trojans and viruses from a specified website by hackers to run on users' computers. Therefore, Rising anti-virus Trojans (2009.2.23-3.01) are listed as viruses of interest this week.★★★.

After the "Meles Trojan download tool variant cap" virus is run, a file named 98989898 will be released in the temporary folder of the user's computer. The file is a driverProgram, Will close a large number of anti-virus software processes and create a registry hijacking to avoid scanning and killing them. The virus also modifies the hosts file and releases the usp10.dll in each folder of all non-mobile disks. After the DLL is loaded, it reads the relevant information in the system folder, and download a large number of viruses and Trojans. It brings great inconvenience to the user's detection and removal and normal use of computers.

========================================================== ========