Warning of new viruses spread via Yahoo Messenger in Vietnam

In April 10, 2006, many Yahoo Messenger users in Vietnam said that there were some new viruses fake a 'anhdep.jpg' link and were very self-spreading.

When Clicking on the virus link disguises as an image file, the interface will appear as shown in the image.Don't be fooled by clicking "run" or "save"!

The unknown virus of origin mentioned passes a message to all the nicknames included in the YM friend list, verbatim as follows: 'Nice girls!. look at this . 'and the attached link: /Giift/?file=Anhdep.jpg or /Gift/?file=e-card.htm . hosted from xrobots.net domain name .

Although on the jpg link display (image format), but when the user clicks on the link above, there will be a software that appears and has the exe format.The interface forces you to select 'Run' or 'save' (write to the device).

Looking through this link, you can immediately see that the author has deliberately tricked the user with the file name Anhdep.jpg, via the syntax? File =.In fact, when clicking on the link, the computer will ask the user if he wants to download a file anhdep.jpg.exe (anhdep.jpg is the file name) to the computer.

As soon as the user is foolish to let the virus infiltrate the machine if the software appears, the Virus software will automatically send all Yahoo Messenger addresses in your yahoo list if you have a chat nick.It is the virus-infected person who does not know that he is spreading these dangerous links.

There are currently no specific statistics on the harmful effects of the virus mentioned above, and with the speed of the spread of the number of people, it is clear that it is putting the Vietnamese online community at great risk of security.

All links distribute "gaidep" virus;"anhdep" . comes from the website www.xrobots.net.This is a black site that contains many viruses and spyware.Some reliable sources said that the domain was only created two days ago, but viruses and spyware from here are spreading horribly in the Vietnamese online community mainly through Yahoo Messenger.

According to VietNamNet's own source, it is very likely that the author of this link is Vietnamese (because infected Yahoo Messenger users are mostly Vietnamese).This is a type of BOT virus, when it enters the computer, it controls control (also called a zombie computer), forming a Botnet computer network for virus authoring to control.Some hackers in Vietnam have not yet qualified to find ways to spread these BOT viruses by . hiring young children to install Internet products for VND 1,000 / phone.

At the level of national security response, when there is a similar incident, the Internet service provider who holds the Internet connection internationally (in Vietnam is VDC) needs to have early intervention measures to block access. from Vietnam towww.xrobots.netdomain name.This action will minimize the spread of Yahoo Messenger virus infection by ignorant users.

The best advice is when there are offline messages or strange messages sent by anyone in your Yahoo Messenger list that contains links to xrobots.net addresses or links of unknown purpose, please turn off right in that chat window and do not click on the link or run any software (run) on the screen.

With the infected machines, you can delete the virus file manually in the C: Windows drive, delete the messenger.exe file.If you can't delete it, run Safe Mode and delete it.The last way is to delete the file C: Windowsmessenger.exe from MSDOS.

1. The Phong