Many vain Vietnamese websites

" The virus family of the W32.Dashfer family when infected with a PC will cause a victim to visit a site that thinks the site has been maliciously inserted ." BKIS expert Vu Ngoc Son describes the type of worm that has the largest spread in Vietnam.

In fact, the virus is in one or more computers where the victim machine has the same network connection. With the "blind-fire" approach, this virus when it gets into a PC sends broadcast packets using the ARP protocol (address resolution protocol) to all other computers on the same network to impersonate the Gateway. of the system. The Internet connections of all computers on the network will now be tricked through the forged gateway first, then the real gateway. In this way, malicious code controls the entire process of exchanging data and inserting iframe containing malicious code into the content of web pages before they are returned to the user's computer. " This is the mechanism that makes the user, if infected with the virus, just go to the website . all have a phenomenon that seems to be virus, " Son said.

The BKIS Center said that recently, hundreds of computers of a Ministry Office office had been stuck with a variant of this virus called W32.FialaM. Also this malicious code is making Yahoo Messenger impolite because there is a public opinion that banner ads under this chat software have been installed virus to infect many people. " In fact, Yahoo Messenger is not related to this incident, because the user's network is virus-infected, so they go to any site that sees the iframe inserted with malicious code. Login to Yahoo Messenger will also see that ", BKIS expert affirmed.

W32.FialaM is a variant of the W32.Dashfer virus strain, belonging to a gateway virus that originates from China. This worm family has been around since December 2007 and until now has been continuously in the Top 5 most spread viruses every month.