185,000 computers were infected with Rontokbro virus in July

In July, continuing to top the list of the most contagious viruses in the month, 'Rontokbro' became a name that must be noted 'reluctantly' by users in Vietnam.

According to the Virus Security Center's virus surveillance system, about 185,000 computers in Vietnam were infected with the virus in July.

In addition to directly affecting the work of the computer users when infected, the virus will run very slowly and sometimes restart itself, the spread of Rontokbro also seriously affects the resources of the whole system. network, causing bandwidth, traffic congestion .

To soon put an end to Rontokbro's strong spread, it is recommended that network administrators review their entire system, turn off all unnecessary folders, shared drives, install antivirus software. and update the latest version for all computers in the network. Network administrators should also install antivirus software at the Internet gateway of the Gateway Scan, which is the most effective place to block viruses because they can kill viruses before they can enter. computers inside the network.

In July, 49 computer viruses both 'internal' and 'foreign' spread in Vietnam, nearly double the number of June. Among them, two domestic viruses spread through Yahoo! Messenger disturbs the community using this software.

Although users in Vietnam are no longer familiar with the viruses spread through Yahoo! Messenger, especially after the new virus 'boomed' not long ago (April 2006), but the number of computers infected with 2 viruses spread through Yahoo! Messenger in July up to several tens of thousands up to now. Therefore, the user should note that while chatting (chatting) and receiving a link from the other party, be careful. This may be caused by the virus itself to deceive, make sure the person who is talking to me will click on that link.

There have appeared a number of Adware dispersers (illegal advertising software) for the purpose of advertising, this phenomenon in the world has been very popular, but in Vietnam there are signs of increasing.

Adware originating from Vietnam such as KeepmeScript or ExploitJS are becoming a headache for many computer users in Vietnam. According to BKIS monitoring system, the number of computers infected with these types of Adware is as much as the number of computers infected with other viruses.

Currently, these Adware of Vietnam mainly take advantage of Internet Explorer (IE) error when processing XML for unauthorized intrusion into users' computers. If your IE browser has not been patched, just if you accidentally visit one of the sites that have malicious code installed, your computer may be infected with Adware immediately without your knowledge. To prevent these Adware, you need to quickly update patches for IE.

The fact that many computers in Vietnam are infected with 'internal' Adware also reflects a current trend of some hackers in Vietnam: setting up music forums, online news ., seeking to collect draw lots of members, then quietly install malicious code on their computers. As a result, hackers can take control of victims' computers, advertise, steal information, or even build Botnet networks to serve DDos attacks.

To protect themselves and the community, users should not go to music forums, online news . when the source is unknown. It could be the "traps" that are being prepared and just waiting to invade your computer.

In the past month, the 5 most contagious viruses were: W32.Rontokbro.Worm, W32.RontokbroE.Worm, W32.RontokbroK.Worm, W32.RunDllUSBB.Worm, W32.YmHeart.Worm.

According to experts, in July there were many cyber security events that had a great influence on the network security situation in Vietnam.

The first is the loophole in two exploited open source Webmin / Usermin software. The incident leads to serious consequences when in Vietnam, some large hosting service providers use the faulty version of these two software, making hackers can easily break into the system, set 400 The website is in danger, including banks and state agencies.

The second outstanding event of the month was the arrest of the culprit (DDoS) culprit on Nhan Hoa's system. This is the second time, hackers DDoS attack has been retired since the case of Nguyen Thanh Cong (DantruongX) attacked Viet Co company. With this event, perhaps the type of crime that attacks DDos of commercial websites in recent years will be repelled.

In this July, more than 30 websites located at two hosting servers of a hosting provider were attacked by hackers, leaving the words "kuwait hacker", luckily, these were merely attacks. nature 'prove the ability', by a group of foreign hackers. Also this month, a Vietnamese hacker, nicknamed GuanYu, entered the home page of another major service provider in Vietnam, who may have been able to collect information from 16 other websites. put together on this company's server system.

Below is information about important security vulnerabilities in July that may affect network systems in Vietnam: Vulnerabilities in Microsoft's update July, Webmin / Usermin Vulnerabilities, Vulnerabilities on MS PowerPoint, buffer overflow error of MS IIS, SQL Injection Error of Invision PowerBoard.

L.Quang