Through monitoring the Internet, the National Computer Virus Emergency Response Center found that a malicious trojan Trojan_Generic F。 The malicious trojan program disguised itself as a Java upgrade program by modifying the key values related to the registry of the infected operating system to automatically start with the system boot.
After the malicious trojan/program runs, it will find the host process in the infected operating system and inject itself into the process file. At the same time, the trojan will copy itself to the designated directory of the infected operating system and rename it as the system executable process file.
In addition, the malicious trojan program forces the infected operating system to actively connect to the Web server designated by the malicious attacker in the background, upload the local information of the infected operating system, and accept the remote instructions of the malicious attacker, which ultimately leads to the theft and disclosure of private information data, online banking accounts and passwords in the infected operating system.
Experts remind:
In view of this situation, the National Computer Virus Emergency Response Center recommends that computer users take the following precautions:
（1） For computer users who have infected the malicious trojan program, we recommend that you immediately upgrade the anti-virus software in the system for comprehensive anti-virus.
（2） For computer users who are not infected with the malicious trojan program, we recommend that you turn on the "system monitoring" function of the anti-virus software in the system to actively defend various operations from the registry, system process, memory, network and other aspects, so that you can monitor the intrusion activities of unknown viruses at the first time, To achieve the purpose of all-round protection of computer system security.
Original article reprint please specify: reprint from Seven Travelers Blog
Fixed link of this article: https://www.qxzxp.com/2838.html
