Note: the National Centre for computer viruses found Trojans-Trojans, viruses-IT news Note: the National Centre for computer viruses discovered the new wooden horse

National computer virus emergency response center by monitoring the Internet found that has recently suffered from a malicious Trojan variant of Trojan_Agent.FTK.

The variant runs, will copy itself to the infected operating system the specified folder, rename the executable file. Meanwhile, the variants released malicious dynamic link DLL component, the component's exported functions have the shut down the system capabilities of the security services.

In addition, specify the active variant forced infected operating systems to access a malicious Web site. Final variant can obtain information on this computer infected operating systems (such as computer name, operating system version, processor type, memory size, and so on), then sent to a malicious attacker on a specific Web server, resulting in infected operating systems to accept a remote malicious code instructions.

For computers that have been infected with the malicious Trojan horse variants users, national computer virus emergency response Center recommends the immediate upgrade of antivirus software, a comprehensive antivirus. Users who were not infected with antivirus software recommended open systems "System Monitor" function, from the registry, system processes, memory, network, and other aspects of various operations to active defense, to monitor unknown virus intrusions in the first, achieve the full objective of protecting the security of computer systems.

注意：国家计算机病毒中心发现新木马 - 木马,电脑病毒 - IT资讯
注意：国家计算机病毒中心发现新木马

国家计算机病毒应急处理中心通过对互联网的监测发现，近期出现一种恶意木马程序变种Trojan_Agent.FTK。

该变种运行后，会自身复制到受感染操作系统指定文件夹下，重命名为可执行文件。与此同时，该变种会释放恶意动态链接DLL组件，该组件的导出函数具有关闭系统的安全服务的功能。

另外，该变种会迫使受感染操作系统主动访问指定的恶意Web网址。最终变种可以获取受感染操作系统的本机信息(诸如：计算机名、操作系统版本、处理器类型、内存大小等)，随即发送到恶意攻击者指定的Web服务器上，致使受感染操作系统接受远程恶意代码指令。

针对已感染该恶意木马程序变种的计算机用户，国家计算机病毒应急处理中心建议立即升级系统中的防病毒软件，进行全面杀毒。对未感染的用户建议打开系统中防病毒软件的“系统监控”功能，从注册表、系统进程、内存、网络等多方面对各种操作进行主动防御，以第一时间监控未知病毒的入侵活动，达到全方位保护计算机系统安全的目的。