Beijing Information Security Assessment Center and Kingsoft Antivirus jointly released the popular virus on December 13, 2004.
Today, users are reminded to pay special attention to the following viruses: "DSNX" (.05) and "Spth" ().
"DSNX" hacking tool, after the virus is run, it will open the backdoor, listen to TCP port 113, and send an online notification to the designated IRC server, waiting for the hacker to send illegal control commands.
"Spth" JS virus, which can be transmitted through Email, IRC software, and P2P software, releases a large number of copies of the virus to the system directory, and deletes the program files of commonly used antivirus software.
1. "DSNX" (.05) Threat level: ★★
According to Kingsoft Antivirus Antivirus Engineer's analysis, the virus copies itself to the system directory, renames the random file name, and then loads it into the startup item to achieve the purpose of booting up. Then release a driver and load it as a service. After loading, the virus deletes the driver. This driver regularly loads viruses into startup items, ensuring that the virus has a chance to run every time it is powered on. The virus will open the backdoor, listen to TCP port 113, and send an online notification to the designated IRC server, waiting for the hacker to send commands.
Kingsoft Anti-Virus experts remind users: With the development of the network, the problem of hacker attacks on users' computers has become more serious. Many network viruses have adopted hacker methods to attack users' computers. Therefore, users should also install personal firewall software to prevent hackers.
2. "Spth" () Threat level: ★★
According to Kingsoft Antivirus Antivirus experts, the virus is automatically generated by the generator. This type of virus can be transmitted through Email, IRC software (mIRC, pIRCh, vIRC), P2P software (Kazaa, Morpheus, Bear Share, LimeWire, Edonkey, AppleJuice, Overnet). It can be automatically loaded through registry, ,, etc., and it will also release a large number of virus copies to the system directory, delete the program files of commonly used antivirus software, and modify the user's desktop shortcut to point to the virus file.
Kingsoft Anti-Virus Experts remind users: With the increasing development of computer technology, more viruses will accompany you. In order to ensure the security of your system and personal information, please update the Anti-Virus' virus database frequently to prevent the invasion of viruses.
Kingsoft Antivirus Antivirus Engineer reminds you: Please upgrade the Antivirus until December 13, 2004 to fully process the virus. If Kingsoft Antivirus is not installed, you can log in to / use Kingsoft Antivirus's online drug check or Kingsoft Antivirus download version to prevent the virus from invading.
Today, users are reminded to pay special attention to the following viruses: "DSNX" (.05) and "Spth" ().
"DSNX" hacking tool, after the virus is run, it will open the backdoor, listen to TCP port 113, and send an online notification to the designated IRC server, waiting for the hacker to send illegal control commands.
"Spth" JS virus, which can be transmitted through Email, IRC software, and P2P software, releases a large number of copies of the virus to the system directory, and deletes the program files of commonly used antivirus software.
1. "DSNX" (.05) Threat level: ★★
According to Kingsoft Antivirus Antivirus Engineer's analysis, the virus copies itself to the system directory, renames the random file name, and then loads it into the startup item to achieve the purpose of booting up. Then release a driver and load it as a service. After loading, the virus deletes the driver. This driver regularly loads viruses into startup items, ensuring that the virus has a chance to run every time it is powered on. The virus will open the backdoor, listen to TCP port 113, and send an online notification to the designated IRC server, waiting for the hacker to send commands.
Kingsoft Anti-Virus experts remind users: With the development of the network, the problem of hacker attacks on users' computers has become more serious. Many network viruses have adopted hacker methods to attack users' computers. Therefore, users should also install personal firewall software to prevent hackers.
2. "Spth" () Threat level: ★★
According to Kingsoft Antivirus Antivirus experts, the virus is automatically generated by the generator. This type of virus can be transmitted through Email, IRC software (mIRC, pIRCh, vIRC), P2P software (Kazaa, Morpheus, Bear Share, LimeWire, Edonkey, AppleJuice, Overnet). It can be automatically loaded through registry, ,, etc., and it will also release a large number of virus copies to the system directory, delete the program files of commonly used antivirus software, and modify the user's desktop shortcut to point to the virus file.
Kingsoft Anti-Virus Experts remind users: With the increasing development of computer technology, more viruses will accompany you. In order to ensure the security of your system and personal information, please update the Anti-Virus' virus database frequently to prevent the invasion of viruses.
Kingsoft Antivirus Antivirus Engineer reminds you: Please upgrade the Antivirus until December 13, 2004 to fully process the virus. If Kingsoft Antivirus is not installed, you can log in to / use Kingsoft Antivirus's online drug check or Kingsoft Antivirus download version to prevent the virus from invading.