Recently, Kaspersky Lab received the users to report YY official website to download the program contains Trojan. After analysis, Kaspersky found the URL provided by the user of YY voice is not really the official website. With further investigation found that more than one of these sites, and Trojan groups are Daohao fake, and the download link by placing a large number of bundled voice tools YY Daohao Trojan program. If the player inadvertently downloaded from these sites and run a malicious fake YY bundled voice tools, can be infected by a large number of Daohao Trojans, causing irreparable damage.
Kaspersky Lab has found that these groups also seek to enhance the Trojans Daohao fake official website rankings in search engines, and even advertising to deceive the user, such as the following two screenshots shall be October 11 in a two search engines Search "YY official" word of the results, we can see the ads ranked first fact is not YY official web site, but the fake malicious website, while yy.duowan.com YY is the real official website.
Remove the advertising links, the Baidu and Google search results, you can also see many other fake YY website ranked in the forefront in the search results, see the following screenshot:
Baidu search results on October 11
Google search results on October 11
From these results we can see that groups use Daohao Trojan is not a fake site, but there are many web site vary, but only one aim, that is to lure users to download Web site provides bundled with a Trojan horse program, opportunistic Daohao. Here are a few fake site opens the way, from the screenshots we can see that Kaspersky can identify and killing malicious programs above:
Fake web site 1. URL: www.yy-daowan.com
Fake site 2. URL: www.douwam.com
Fake site 3. URL: wowyy.duowan.cn
Not only that, downloading from these sites have been tied down by the Trojan YY voice tools Daohao surface looks like a normal installation procedure no different, if the user does not install anti-virus software will not find any problems in this process, as illustrated by said:
Once the user running the installation program, the results will lead to a large number of Daohao Trojan infection, as shown below:
The analysis found that these types of complex Daohao Trojans are for the popular online games such as World of Warcraft, Knight in the world, underground city with the Warriors, etc., once infected, could have caused huge losses online game players.
Kaspersky Lab to remind the majority of online game players, the Internet and download programs, pay special attention to improve security vigilance to avoid falling into the trap set Daohao Trojan groups. Also recommended to install anti-virus software and update anti-virus database, to protect online game account security. In addition, the counterfeit of the YY groups Daohao Trojan Voice Tools web site, and will also fake other websites, to take preventive measures, the majority of players should improve safety awareness, to develop good computer habits.