Warning of new malware appear like Wannacry, capable of deleting Vietnamese percussion on computer

A new type of malicious code appeared, taking advantage of vulnerabilities in the Windows operating system (the MS17-010 vulnerability was announced in March 2017) to spread widely in the local area network (LAN) (similar to how it spreads). like the legendary Wannacry virus) is spreading in Vietnam. In particular, this new virus also turns off the process and deletes Vietnamese keyboards on the computer. If your computer has been removed in Vietnamese, please consider the case of this type of malware infection.

Update: Although this warning was issued from April 4, 2018, there have been malicious users. Everyone should keep an eye on the operating system update to fix the vulnerability.

1. How to block malicious code manually delete Vietkey, Unikey, Zalo on the computer

Mr. Le Manh Tung, Research Director of CyRadar said, this type of malicious code is used in conjunction with the system intervention files (rootkit) to conceal, and continuously connect to the control server to update the executable file, and always maintain a process of digging virtual money on the machine. Therefore, regular review tools are difficult to detect.

However, users can easily recognize the problem because the virus constantly checks to turn off the process and delete the file of Vietnamese keyboards (Unikey, Vietkey).

How to prevent malicious code

As a precaution, research director of CyRadar made a recommendation:

For Windows users: quickly update the vulnerability patch (recommending Auto Update mode), or at least perform the download and install the MS17-010 patch separately. Be careful in using email, opening strange files or accessing strange links.

For businesses: should apply more network monitoring solutions.

See more:

1. What to do when the computer is infected with a virus that fights virtual money?
2. How to use a firewall in Windows 10
3. Microsoft released a patch for 75 critical vulnerabilities on Windows 7 / 8.1 / 10, asking users to install