The malicious code dubbed Trojan-Downloader.Win32.FakeUnikey.1 (CMC InfoSec) or BotFakeUNK.Trojan (Bkav). After successful installation, installs malicious code onto a user service, then download additional malicious code and turn your computer becomes infected computers under botnet under the control of hackers.
According to Vu Ngoc Son, Director of Research and Development Bkav, K = Unikey when users run, this trojan will activate and infect computers. Trojan is installed to control a computer service named odservice (odserv names similar to the Microsoft service), the Trojan executable file located in directory
% Program Files% \ Common Files \ Microsoft Shared \ OFFICE \ ODSERV.EXE.
Mr. Nguyen Hoang Giang - CisLab said "at least have been put online malware from 23-1-2012 or possibly earlier, the number of users tricked into downloading software with malicious unikey is huge."
The malicious code distributed through the insert malicious code into software Unikey after totally controlling gain unikey.org website in the first months of 2012. Hackers have been pointing the path Unikey software downloads on a fake website made by hackers in software site SourceForge.net. Unikey software files on this website contains malware trojan.
Author Unikey - Pham Kim Long said the site is fake http://unikey.vn/vietnam/, to ensure a clean program, people to download the installer from the main warehouse of sf.net Unikey not hack in http://sf.net/projects/unikey address.
Trojan-Downloader.Win32.FakeUnikey.1, CMC InfoSec has been updated to the database of Anvirus CMC / CMC Internet Security. Users can download the software installed at its homepage: www.cmcinfosec.com, or download the tool at: http://www3.cmcinfosec.com/downloads/tools/CMC.CleanFakeUnikey.zip
Updated antivirus software detects malicious pattern in the free version and no fees. Users can download the latest Bkav to test and treat virus on your computer (if any) at http://www.bkav.com.vn/download
0 comments:
Post a Comment