'Internal virus' YMHeart infected 4,600 Vietnamese computers via chat

With beautiful images of hearts and flowers with a link appearing on Yahoo Messenger window from your nick chat, the virus originating in the country has caused many computer users to trap. Whether it has broken or stole data, this worm still causes a lot of trouble.

Nguyen Binh Minh Tu, a reader of VnExpress, expressed concern that when chatting with Yahoo Messenger, click on the link http://yahootools.t35.com/heart.com and download 2 files heart.exe and keyzip.exe runs, but it doesn't work (each file is about 40 KB). " Then, every 20 minutes, the site had a very annoying download request. I scanned for viruses and spyware with McAfee and Spybot but didn't see it, " Tu said.

Network Security Center Hanoi Polytechnic University BKIS calls this YMHeart virus spread mainly in Vietnamese community using Yahoo Messenger (YM). Just like viruses that spread through the most popular chat program ever appeared, YMHeart also has a mechanism for transmission based on users' loopholes: while two people are chatting, if a computer is infected. YMHeart, the other party will receive unique links on the chat window and this person will think it was sent by the chat. If you click on it carefully, the PC will be infected with the virus. In the meantime, links that say ' Click Here To Send Your Friends A Heart . ' or 'My Day De Gui 1 Boy's Heart For Ban Be . ' will automatically appear in the chat window of the victim's friends. The infected computer will not be able to use programs such as viewing the process information (Windows Task Manager), editing the Registry (Registry Editor), viewing the boot parameters of the computer (System Configuration Utility) . .

BKIS director Nguyen Tu Quang said that the current virus version does not destroy or steal data but only annoys users when using YM and other programs. " However, virus writers can change the source of infection so that they can delete the data on the victim's computer or take control of the device, thereby making changes, stealing data ." , Mr. Quang said.

According to network security expert, YMHeart's spread rate is not high. Moreover, after the viral event of Gaixinh spread widely in Vietnam in April, users were also more wary of the links received in this manner. However, according to BKIS statistics, there are about 4,600 domestic computers containing YMHeart. Currently, foreign antivirus software such as Bit Defender, Trend Micro, McAfee or Norton AntiVirus have not updated this virus. To handle YMHeart, infected computer users can download Bkav software at www.bkav.com.vn.

" In order to be wary of viruses like this, be aware that while chatting (chatting) and receiving a link from the other party, be careful. This may be caused by the virus to fool yourself ," he said. Quang recommends. " Make sure the person who is talking to me will click the link ".

Nguyen Hang