What are the poisons of trojanspy.banker. and trojanspy.keyspy.g? Help your honor ~~!

On September 1, the anti-virus center of Jiang Min Company intercepted the Trojan horse. Banker.s, the latest variant of "online banking thief". The virus disguised as a decoder installer, trying to steal the account information of China Merchants Bank users through keyboard recording. The virus will also download the email address search module and the sending module, and spread seductive emails by sending emails to lure more users to download the virus.

According to an anti-virus expert in Jiang Min, the "new online banking thief" locates the target window of stealing information by whether the title bar contains "bank", "bank" and "bank". The website of China Merchants Bank attempts to steal information such as "4.0 main login user name", "4.2 main login user name", "user information" and "certificate recovery information".

After the virus runs, the "Decoder Installed Successfully" dialog box will be displayed, and the registry will be modified to add self-startup items, which will be associated with text files and executable files, so that the virus will run at the same time as long as such files are run.

The virus will download the email address search module to a specific website. After the download is successful, it will search the email address on the user's computer and send an email to induce the user to download the virus and spread it. The virus will not send emails containing Jiang Min samples to the email addresses of anti-virus manufacturers.

The characteristics of messages sent by viruses are as follows:

Sender: Forged

Title: Let's take a look at my candid photos.

Text:

Friend:

Hello!

I am the manager of a five-star hotel and a photographer who specializes in taking pictures of social ugliness. In recent years, I secretly installed cameras in some high-end rooms of the hotel and photographed more than 200 works, including the fragments of husband and wife's life on their wedding night. There are also records of some actors in the entertainment circle having sex transactions in order to please famous directors; There are even some rich people who spend a lot of money on the right of middle school girls to have their first night. What is even more shameful is that they actually have sex with middle school girls who are only fifteen or sixteen years old during the day, so that their ugly behavior can be photographed more clearly. After checking out, these rich people also photographed the bright red blood left after having sex with middle school girls in their rooms. In order to expose these ugly phenomena in society and make these people accept social condemnation, I have specially set up the "China Ugly Sneaking Blog Network" to make these ugly works of society public, hoping to get the support of netizens. If you have any works about this, you can also post them on my website.

The website of "China ugly phenomenon sneak shot network" is/index.htm. Welcome to visit and hope to get your support. This website is a public welfare website without any advertisements. All the sneak shots are compressed in asx format. If your system is not equipped with a decoder, you can install or download my works online.

China's ugly phenomenon steals the Internet.

For this virus, Jiang Min Company has upgraded the virus database at the first time. Please immediately upgrade KV2004 antivirus software to September 1 day virus database, and turn on KV's real-time monitoring and privacy protection functions to thoroughly kill viruses and protect your bank account information from infringement. For more information, please visit Jiang Min Anti-virus Information Network, Jiang Min Technical Support Hotline: 010-8251177, online antivirus and computer first aid.