Chun Feng who wrote in the Microsoft Malware Protection,said that if the user's operating system hit by Trojan attacks: Win32/Popureb.E,it is advisable to immediately fix the Master Boot Record (MBR) and use the recovery CD to restore the infected system.Trojan attack Popured MBR hard-drive,the first sector where the code is stored to help the system operational,after the BIOS on the computer doing its start-up check.This Trojan is not detected by the operating system as well as by any security software.The characteristics of computer virus is a file like this:
<current folder>\hello_tt.sys\physicaldrive0c:\documents and settings\all users\documents\my videos\pulgfile.log
Typically, the malware can perform a remote for the following purposes:
1. To confirm internet connectivity
2. To report new infections to users
3. To receive configuration data or other
4. To download and run the file automatically (including updates or malware)
5. To receive instructions from remote attackers
6. To upload the data retrieved from a computer virus
And according to information from Microsoft that we should do to prevent it is:
1. Enable a firewall on your computer.
2. Get the latest computer updates for all software installed.
3. Always update the antivirus.
4. Restrict user rights on the computer.
5. Be careful when opening attachments and accepting file transfers.
6. Be careful when clicking links to Web pages.
7. Avoid downloading pirated software.
8. Beware of social engineering attacks.
9. Use strong passwords
Hopefully useful for my friend
