Add date: 09/23/2008   Publishing date: 09/23/2008   Hits: 2

---

The people remind you to pay attention today: Trojan/DNSChanger.fuo “the DNS chameleon” variety fuo and TrojanDownloader.JS.Ag ent.im “acts the wooden horse” in today's virus variety im to be worth paying attention.   Viral name: Trojan/DNSChanger.fuo  Chinese name: “DNS chameleon” variety fuo  Viral length: 27136 byte   Viral type: Wooden horse   Harm rank: ¡ï  Affects the platform: Win 9X/ME/NT/2000/XP/2003  Trojan/DNSChanger.fuo “the DNS chameleon” variety fuo is “the DNS chameleon” one of wooden horse family's most young bloods, uses the higher order language compilation, and after adds shell processing. After “DNS chameleon” variety fuo movement, duplicates is infected the computer system “%SystemRoot% \ system32” under the table of contents, names again as “hgqhp.exe”, and its increase for the start item, realizes the wooden horse starting automatic movement. The start “explorer.exe” and “iexplore.exe” the advancement, the malicious code pours into moves, hides oneself, avoidance security software's Zha Sha. Tampers with the DNS establishment forcefully, reduces is infected on computer's safe establishment, possibly causes to infect the computer to be unable the normal linked network and so on. In is infected computer's backstage to connect the hacker to assign the stand, the downloading massive evil intention procedure and, in is infected on the computer the automatic movement. Downloads the malicious procedure possibly contains the net to tour the wooden horse, the malicious advertisement procedure, the back door and so on, brings the varying degree to the user the loss. Moreover, “the DNS chameleon” variety fuo has the self-deletion function, with the aim of eliminating the trace.   Viral name: TrojanDownloader.JS.Ag ent.im  Chinese name: “acts the wooden horse” variety im  Viral length: 3181 byte   Viral type: Wooden horse downloading   Harm rank: ¡ï  Affects the platform: Win 9X/ME/NT/2000/XP/2003  TrojanDownloader.JS.Ag ent.im “acts the wooden horse” variety im is “acts the wooden horse” one of wooden horse downloading family's most young bloods, uses the javascript script language compilation, and after encryption processing, the use “unites the numerous worlds” some ActiveX to control the stack overflow crack as well as “Real the Player media player” the crack disseminates other virus. “acts the wooden horse” variety im general to inlay in the normal homepage, if the user computer does not have prompt promotion patching “to unite the numerous worlds” as well as “Real the Player media player” the corresponding crack patch, when then the user use browser visit has “acts the wooden horse” the variety im malicious homepage, in the current user computer's backstage will connect the hacker to assign the stand, the downloading massive evil intention procedure and, in is infected on the computer the automatic transfer movement. And, downloads the malicious procedure possibly tours the wooden horse, the malicious advertisement procedure, the back door for the net and so on, brings the varying degree to the user the loss.   In view of the above virus, suggestion general computer user:   1st, please immediately promote Jiang Min to kill the poisonous software, opens the new generation intelligence graduation to kill the poisonous engine and each monitoring high speed, prevents attack user computers and so on virus which, wooden horse, harmful procedure or code at present is in vogue.   2nd, the river people KV online edition's user please prompt promotion control center, and suggest related administrative personnels when suitability carries on the entire net to look up kills the virus, the guarantee enterprise information security.   3rd, river civil defense Ma Qiang in the system automatic collection analysis belt poisonous homepage's foundation, through the black and white name list, the impediment user visit has the wooden horse and the malicious script malicious homepage and carries on processing, effective safeguards user surfer security.   4th, the choice has “the homepage against horse wall” the function to kill the poisonous software (for example KV2008), every day promotes kills the poisonous software virus storehouse, fixed time carries on the virus to the computer to look up kills, when surfer opens kills the poisonous software to monitor completely.

Prev:The river people issued that on August 05 the virus disseminates news

Next:¡°tabletop spirit¡± surprise attack Internet synthesis many kinds of evil intention virus characteri

Comment:

---

Category: Home > the virus to be related