Kingsoft Anti-Virus Meteorology (December 20 to December 26, 2004)
Kingsoft Anti-Virus Emergency Center will update the upgrade package this week. Please download the upgrade package at Kingsoft Antivirus website as soon as possible. The following are introductions to several important viruses:
This week, the focus is on the virus:
1. Hacker program: "Delf"() Threat level: ★★
According to Kingsoft Anti-Virus Engineer's analysis, the virus first creates an event to prevent multiple instances of the virus from running at the same time, copy itself to the system directory, load itself into the startup item in the registry, and then open a random port to wait for the hacker to connect. The virus will download the file and run it to the specified IP and port, causing the machine to be infected with another virus. The virus will brute-force the remote host through a password table that comes with it, and directly copy itself to some default shared directories of the remote host. If the copy is successful, task debugging will be added remotely, allowing the virus to run automatically on the remote host, thus infecting more hosts and causing the LAN to be paralyzed. The virus keeps opening threads to SYN attacks on port 445 of certain IP segments, causing the poisoned machine to run out of resources and crash.
Kingsoft Antivirus Antivirus experts recommend users: With the development of the network, the problem of hacker attacks on users' computers has become more serious. Many network viruses have adopted hacker methods to attack users' computers. Therefore, users should also install personal firewall software to prevent hackers.
2. *: "Password Monitor" () Threat level: ★★
According to Kingsoft Antivirus Antivirus experts, the * will steal the account password of the China Game Online Center and send it to the email address designated by the * grower. * programs will access the network when sending emails. Please use network firewalls such as NetBarrius to intercept unknown programs to access the network when there is no anti-virus software such as VANGBAO.
Kingsoft Antivirus Antivirus experts remind users:
1. Establish good safety habits and do not open suspicious emails and suspicious websites;
2. Close or delete unwanted services in the system;
3. Many viruses are spreading using vulnerabilities, so you must patch the system in time;
4. Install professional antivirus software for real-time monitoring. When surfing the Internet, you must turn on the real-time monitoring function of the antivirus software.
Kingsoft Antivirus Antivirus Engineer reminds you: The above two viruses can be fully processed when upgraded to December 20. Kingsoft Antivirus virus updates every working day. Please upgrade the virus database at any time to ensure the security of your system. If you do not have Kingsoft Antivirus installed, you can log in to use Kingsoft Antivirus's online drug check or Kingsoft Antivirus download version to prevent the virus from invading.
Kingsoft Anti-Virus Emergency Center will update the upgrade package this week. Please download the upgrade package at Kingsoft Antivirus website as soon as possible. The following are introductions to several important viruses:
This week, the focus is on the virus:
1. Hacker program: "Delf"() Threat level: ★★
According to Kingsoft Anti-Virus Engineer's analysis, the virus first creates an event to prevent multiple instances of the virus from running at the same time, copy itself to the system directory, load itself into the startup item in the registry, and then open a random port to wait for the hacker to connect. The virus will download the file and run it to the specified IP and port, causing the machine to be infected with another virus. The virus will brute-force the remote host through a password table that comes with it, and directly copy itself to some default shared directories of the remote host. If the copy is successful, task debugging will be added remotely, allowing the virus to run automatically on the remote host, thus infecting more hosts and causing the LAN to be paralyzed. The virus keeps opening threads to SYN attacks on port 445 of certain IP segments, causing the poisoned machine to run out of resources and crash.
Kingsoft Antivirus Antivirus experts recommend users: With the development of the network, the problem of hacker attacks on users' computers has become more serious. Many network viruses have adopted hacker methods to attack users' computers. Therefore, users should also install personal firewall software to prevent hackers.
2. *: "Password Monitor" () Threat level: ★★
According to Kingsoft Antivirus Antivirus experts, the * will steal the account password of the China Game Online Center and send it to the email address designated by the * grower. * programs will access the network when sending emails. Please use network firewalls such as NetBarrius to intercept unknown programs to access the network when there is no anti-virus software such as VANGBAO.
Kingsoft Antivirus Antivirus experts remind users:
1. Establish good safety habits and do not open suspicious emails and suspicious websites;
2. Close or delete unwanted services in the system;
3. Many viruses are spreading using vulnerabilities, so you must patch the system in time;
4. Install professional antivirus software for real-time monitoring. When surfing the Internet, you must turn on the real-time monitoring function of the antivirus software.
Kingsoft Antivirus Antivirus Engineer reminds you: The above two viruses can be fully processed when upgraded to December 20. Kingsoft Antivirus virus updates every working day. Please upgrade the virus database at any time to ensure the security of your system. If you do not have Kingsoft Antivirus installed, you can log in to use Kingsoft Antivirus's online drug check or Kingsoft Antivirus download version to prevent the virus from invading.