'Internal virus' YMHeart infected 4,600 Vietnamese computers via chat

With beautiful images of hearts and flowers with a link appearing on Yahoo Messenger window from your nick chat, the virus originating in the country has caused many computer users to trap. Whether it has broken or stole data, this worm still causes a lot of trouble.

Nguyen Binh Minh Tu, a reader of VnExpress, expressed concern that when chatting with Yahoo Messenger, click on the link http://yahootools.t35.com/heart.com and download 2 files heart.exe and keyzip.exe runs, but it doesn't work (each file is about 40 KB). " Then, every 20 minutes, the site had a very annoying download request. I scanned for viruses and spyware with McAfee and Spybot but didn't see it, " Tu said.

'Internal virus' YMHeart infected 4,600 Vietnamese computers via chat Picture 1 Network Security Center Hanoi Polytechnic University BKIS calls this YMHeart virus spread mainly in Vietnamese community using Yahoo Messenger (YM). Just like viruses that spread through the most popular chat program ever appeared, YMHeart also has a mechanism for transmission based on users' loopholes: while two people are chatting, if a computer is infected. YMHeart, the other party will receive unique links on the chat window and this person will think it was sent by the chat. If you click on it carefully, the PC will be infected with the virus. In the meantime, links that say ' Click Here To Send Your Friends A Heart . ' or 'My Day De Gui 1 Boy's Heart For Ban Be . ' will automatically appear in the chat window of the victim's friends. The infected computer will not be able to use programs such as viewing the process information (Windows Task Manager), editing the Registry (Registry Editor), viewing the boot parameters of the computer (System Configuration Utility) . .

BKIS director Nguyen Tu Quang said that the current virus version does not destroy or steal data but only annoys users when using YM and other programs. " However, virus writers can change the source of infection so that they can delete the data on the victim's computer or take control of the device, thereby making changes, stealing data ." , Mr. Quang said.

According to network security expert, YMHeart's spread rate is not high. Moreover, after the viral event of Gaixinh spread widely in Vietnam in April, users were also more wary of the links received in this manner. However, according to BKIS statistics, there are about 4,600 domestic computers containing YMHeart. Currently, foreign antivirus software such as Bit Defender, Trend Micro, McAfee or Norton AntiVirus have not updated this virus. To handle YMHeart, infected computer users can download Bkav software at www.bkav.com.vn.

" In order to be wary of viruses like this, be aware that while chatting (chatting) and receiving a link from the other party, be careful. This may be caused by the virus to fool yourself ," he said. Quang recommends. " Make sure the person who is talking to me will click the link ".

Nguyen Hang

4 ★ | 2 Vote

May be interested

  • Be careful with polymorphic virusesBe careful with polymorphic viruses
    super polymorphic virus (metamorphic virus) w32.sality.pet has stormed vietnamese computer systems in september 2010 with 380,000 infected computers.
  • Can the router be infected with a virus?Can the router be infected with a virus?
    a router is just as susceptible to a virus as a computer. a common reason why the router becomes infected with a virus is that the owner forgot to change the default admin password.
  • Warning: Bkav detected more than 700,000 computers in Vietnam infected with virtual money digging virus that slowed down the computerWarning: Bkav detected more than 700,000 computers in Vietnam infected with virtual money digging virus that slowed down the computer
    bkav has just warned that more than 735,000 computers in vietnam have been infected with w32.coinminer virus. this is a dangerous virtual money digging virus, it will take control and take advantage of the victim's computer to dig virtual money.
  • How to know if Smart TV is infected with malware?How to know if Smart TV is infected with malware?
    smart tvs can be the center of your home entertainment, but did you know that their internet connection makes them vulnerable to malware? if you notice your tv loading slowly or strange pop-ups, it may be more than just a bug.
  • How to identify computers infected with viruses with 10 characteristic signsHow to identify computers infected with viruses with 10 characteristic signs
    no one wants to own a computer infected with the virus. how can i know if my computer has a virus? in fact, there are some signs that help you identify the presence of malware in your computer, let's find out.
  • Causes and signs to identify a computer infected with VirusCauses and signs to identify a computer infected with Virus
    what to do when the computer is infected with a virus? signs that your computer is infected with a virus? share experiences and tips to know if your computer is infected with a virus or not and how to handle the virus 100% successfully
  • Red alert on computer viruses in VietnamRed alert on computer viruses in Vietnam
    in 2010 alone, 58.6 million computers in vietnam were infected with viruses. accordingly, on average, more than 160 thousand computers are infected with virus every day. network security experts assess that this is an alarming number about computer virus situation in vietnam.
  • Update information and how to prevent W32.MyDoom.B Depth.Update information and how to prevent W32.MyDoom.B Depth.
    destroying computers of customers who are caught off guard and automatically sending infected computer emails to addresses in customers' mailboxes preventing computer users from accessing websites with programs antivirus and ww.microsoft.com create a backdoor 'on infected computers to allow any hackers to repair existing viruses that computer users still cannot know this virus is created
  • Virus 'Boredom' caused turmoil through YMVirus 'Boredom' caused turmoil through YM
    an internal virus spreads through the yahoo! messenger (ym) appeared again on september 12, causing a stir in the network of 'residents'. if you are using ym (online), the victim will receive a link from your ym addresses with the content: nothing is impossible! because impossible itself
  • 9 things to do when detecting a computer infected with malware9 things to do when detecting a computer infected with malware
    viruses everywhere! email, social networks, malicious websites and advertising popups are always potential threats. although there are measures to prevent these threats, sometimes your computer is still infected. here are 9 things to do when detecting that the computer is infected with malware.