Wednesday, January 14, 2009

Net-Worm.Win32.Kido.bt outbreak?

Net-Worm.Win32.Kido exploits a critical vulnerability (MS08-067) in Microsoft Windows to spread via local networks and removable storage media. The worm disables system restore, blocks access to security websites, and downloads additional malware to infected machines. Users are strongly recommended to ensure their antivirus databases are up to date. A patch for the vulnerability is available from Microsoft but like aways you must install it and it seems that a lot of people and corporates were too busy with some new year events or happenings and were surprised by this one.
A detailed description of Net-Worm.Win32.Kido.bt and removal instructions are available here.
Several companies in Belgium and the Netherlands have been affected by this worm ... and it's not over yet but I can assure you that we are reaching the levels of a real outbreak and that's really a while ago that we've seen this. A trend to look at and to investigate.

And .. eh BTW .. My Best Wishes for the New Year!
Isn't that a nice start for the new year?