SoFunction
Updated on 2025-04-13

Kingsoft Anti-Virus 20050119_Daily

Beijing Information Security Assessment Center and Kingsoft Antivirus jointly released the popular virus on January 19, 2005.

Today, users are reminded to pay special attention to the following viruses: "Wuhan Boys 2005" (.) and "DDoSer" ().

"Wuhan Boys 2005" * virus, which will send messages to friends through QQ, MSN, UC, and POPO2004, trick friends into clicking on the address of the website with poisoning, and steal information about the legendary game of the poisoned user.
"DDoSer" hacker program, the virus copies itself to the system directory and executes it. If the user system is Win9x, it calls RegisterServiceProcess to hide its own process. The virus attacks the www.918***.com website.

1. "Wuhan Boys 2005" (.) Threat Level: ★★

According to Kingsoft Antivirus Antivirus Engineer, the virus is the 10th variant of the Wuhan Boys 2005 series. The virus will send messages to friends through QQ, MSN, UC, and POPO2004, tricking friends into clicking on the address of the website with poison, causing the friend's system to be infected with the virus. The virus will steal the legendary game information of the poisoned user and send it to a designated place.
Kingsoft Anti-Virus experts remind users: With the development of the Internet, many viruses have also accompanied them. Some viruses specifically steal users' personal privacy, personal data, etc., and may cause greater harm to users' information leakage or cause greater harm to users. Please enhance your security awareness, browse more relevant security information on the Idiot website, and do your own security work to avoid the trouble caused by the virus.

2. "DDoSer" () threat level: ★★

According to Kingsoft Antivirus Antivirus Engineer, the virus is a DDoS attack program. First, the virus will create a mutex called "DDoser" to ensure that only one copy in the system runs, and then override the registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run key Kernel32=, copy itself to the system directory and execute it. If the user system is Win9x, call RegisterServiceProcess to hide its own process. Finally, the virus conducts a DDoS attack on www.918***.com.
Kingsoft Antivirus Antivirus Experts recommend users: Please do not easily run files that have not been processed by antivirus software after downloading from the Internet. It is strongly recommended that you first use the latest virus library to scan and then decide whether to run it.

Kingsoft Antivirus Antivirus Engineer reminds you: Please upgrade the Antivirus until January 19, 2005 to fully process the virus. If Kingsoft Antivirus is not installed, you can log in to/using Kingsoft Antivirus's online drug check or Kingsoft Antivirus download version to prevent the virus from invading.