javqhc New AV terminator Trojan variant, generally the following situations occur:

1. Security software hard disk files are deleted

Unable to open 360, diagnostic tools and other security The software is deleted immediately after running.

2. Commonly used domain names are hijacked to other domain names

This Trojan will modify the hosts table, Qihoo 360, Kaspersky, Kingsoft, Jiangmin, Rising, Symantec, etc. The security vendor's upgrade server, homepage, and forum domain names were all hijacked by a host with an IP address of 222.73.126.115. The screen showed a fake Baidu website, and the domain name was displayed as cn.yahoo.com.

3. The virus file is written into the commonly used software installation directory.

It is found that wsock32.dll exists in the qq installation directory in the system.

Based on what you said above, you can turn on the anti-virus software. I suggest you go to

/article/fangduwenzhang/2008-11-14/209.html