Shortcut in Computer Virus Impacts

Jakarta - According to antivirus company Vaksincom, Indonesia was quite rampant invaded by different variants of viruses that exploit security holes in a shortcut file (. Lnk) on the Microsoft Windows operating system.

Alfons Tanujaya, antivirus analysts from Vaksincom admit it received dozens of samples of viruses that exploit the gap. One of the circulation is quite rapid in this country is Vobfus Worm.

If it infects the victim, Worm Vobfus will do certain things. Here are some of them, as spoken by Adi Saputra, antivirus Vaksincom analyst, in a statement received detikINET, Monday (11/10/2010):

* Protect the worms and prevent the application / security program: The worm tries to monitor the processes running in memory and ensuring that the worm process is not turned off by the program / security applications like antivirus and removal. If there are programs / security applications are running, the worm will attempt to infect and make an error in the program.
* Hiding the folder and create a shortcut file: One of the actions of this worm is able to make computer users dag dig dug for hiding the entire contents of the folder "My Documents" user and replace it with a shortcut file. Shortcut file is actually directed to a virus file with random names. Several other variants just hide a folder and create a shortcut file on a removable drive / disk.
* Remote Connection Server and download files of other viruses: By monitoring the processes running, the worm tries to connect to a remote IP server is infected by a file system such as explorer.exe or svchost.exe files. Once connected, the worm downloads other malware variants that are not easily detected from the antivirus and removal tool.
* Modified key Folder Options: In general, this worm will not do a block of some Windows programs such as Regedit, Task Manager, Folder Options, etc.. But the worm uses other means to file the virus is not easily viewed or deleted, for the virus to modify the Folder Options feature to remove a key that is available is 'Hide protected operating system files (recommended)'. By always turn the key, computer users can not see the virus files and even delete them.