The virus Indonesia Shortcut attack

Security holes on a shortcut file (lnk) on the Microsoft Windows operating system so it targets the virus. Reportedly, there are dozens of samples of viruses are known shortcuts that spreads in Indonesia.

This statement from Alfons Tanujaya, Vaksin.com antivirus analysts. Monday (11/10/2010). "This virus is most prevalent include all customers Vaksin.com and the de facto distribution is very widespread," he said.

According to information from Vaksin.com, many variants of the virus that utilizes the same gap can be difficult to detect by antivirus programs. But there are also antivirus which has a specific technology that allows this sort of thing anticipated.

Here are a few variants of viruses that exploit security holes in the file. LNK on Microsoft Windows as submitted antivirus analyst Adi Saputra from Vaksincom:

Sality (Tanatos): variant of polymorphic viruses make executable file infection, and also found to have used this security hole to make the distribution. In addition to the infected file, Sality create 2 files (1 files autorun.inf and an executable file with random name) through a USB media and full-sharing networks that use (to include also waste hundreds of executable files with random names). 

Zeus (Zbot or botnet): Variant trojans that do web-infection in a web of banks and financial. By adding a keylogger on the web page in order to get a username and password. This worm can infect computers through a crack in a browser like Internet Explorer and Mozilla Firefox. This worm can also perform a broadcast spam to a particular e-mail address. 

Chymine (worm YM or conime / secupdat): a very popular worm infects computers through Yahoo Messenger. With the spread of the same techniques as Zeus / Zbot and Sality, and have different variants. 

Stuxnet: Trojan that recently spread rapidly by utilizing a network connection and USB media. This Trojan makes our hard drive space becomes exhausted. 

VBNA / Hllw.Autoruner (worm Vobfus or Shortcut / Random): Worm shortcut that has characters such as IM worms. By using a random file and many different sizes, it is not rare, not all antivirus can detect variants of this worm virus. When this worm is quite popular and can spread rapidly.

Related Articles