Net-Worm.Win32.Kido
Tue, 13 Jan 2009 16:12:00 +0100
Kaspersky Lab has detected that multiple variants of Kido, a polymorphic worm, are currently spreading widely.
Net-Worm.Win32.Kido exploits a critical vulnerability (MS08-067) in Microsoft Windows to spread via local networks and removable storage media.
The worm disables system restore, blocks access to security websites, and downloads additional malware to infected machines.
Users are strongly recommended to ensure their antivirus databases are up to date. A patch for the vulnerability is available from Microsoft.
Detailed descriptions of Net-Worm.Win32.Kido.bt, Net-Worm.Win32.Kido.dv and Net-Worm.Win32.Kido.fx are available in the Virus Encyclopaedia. A dedicated removal tool is available here.
Virus.Win32.Gpcode.ak
Thu, 05 Jun 2008 14:37:00 +0200
Kaspersky Lab has detected a new version of the ‘malicious blackmailer’ Gpcode - Virus.Win32.Gpcode.ak.
The new Gpcode variant encrypts files with extensions DOC, TXT, PDF, XLS, JPG, PNG, CPP, H etc. on hard drives using an RSA algorithm with a 1024-bit key.
After encrypting files, the virus leaves a text file in the folder next to the encrypted files with following message:
Currently, we detect the new variant, but we are unable to crack the 1024-bit key. Our analysts are continuing to work on both the key and the virus to resolve this issue.
Kaspersky Lab recommends that all Internet users enable maximum protection from malicious code and network attacks on their computers, refrain from executing suspicious programs received from untrustworthy sources and back up any important information on their computers.
Detection of Virus.Win32.Gpcode.ak was added to Kaspersky Anti-Virus signature databases yesterday, on June 4th, at 15:39 GMT. Please make sure to update if you haven’t already.
If you have fallen victim to Gpcode.ak, try to contact us using another computer connected to the Internet. DO NOT RESTART or POWER DOWN the potentially infected machine. Contact us by email stopgpcode@kaspersky.com and tell us the exact date and time of infection, as well everything you did on the computer in the 5 minutes before the machine was infected: which programs you have executed, which websites you have visited, etc. We'll try and help you recover any data that has been encrypted.
For more information about the malicious program, please read our weblog.
Email-Worm.Win32.Warezov.nf
Thu, 19 Apr 2007 06:52:00 +0200
Kaspersky Lab has detected mass mailings of a new variant of Warezov, Email-Worm.Win32.Warezov.nf. At 8.00 Moscow Standard Time, 19 April 2007, 70-85% of the malicious content in mail traffic consisted of various forms of a new modification of Warezov - the Warezov.nf worm.
A few hours before this point, there was a noticeable increase in mail traffic of an earlier modification of Warezov - Warezov.do which featured in the October 2006 Top 20.
If you are using Kaspersky Anti-Virus 6.0 or Kaspersky Internet Security 6.0 with Proactive Protection turned on, new variants will be detected without the need to update your antivirus databases.
A full description of Email-Worm.Win32.Warezov.nf is now available in the Virus Encyclopaedia.
Windows vulnerabilities prove a popular target for cybercriminals in August
Wed, 01 Sep 2010 10:05:00 +0200
Kaspersky Lab announces the publication of its Monthly Malware Statistics for August 2010.
Kaspersky Lab detects new IM worms capable of spreading via almost all instant messengers
Mon, 30 Aug 2010 08:55:00 +0200
Kaspersky Lab announces the detection of a new family of computer worms that are spreading via numerous instant messaging clients
Kaspersky PURE Receives Gold Award in Parental Control Systems Testing
Mon, 30 Aug 2010 08:44:00 +0200
Kaspersky Lab announces that Kaspersky PURE, its comprehensive home network protection solution, came first in tests designed to measure the effectiveness of the parental control modules of ten of the industry's leading security solutions
Wed, 25 Aug 2010 09:59:00 +0200
Q2 2010: more than half a billion infection attempts
Mon, 23 Aug 2010 08:41:00 +0200
Kaspersky Lab, a leading developer of secure content management solutions, has released its report on information security threats in the second quarter of 2010
First SMS Trojan Detected for Smartphones running Android
Wed, 11 Aug 2010 08:25:00 +0200
Kaspersky Lab announces that the first malicious program classified as a Trojan-SMS has been detected for smartphones running on Google’s Android operating system.
First SMS Trojan detected for smartphones running Android
Mon, 09 Aug 2010 07:05:00 +0200
TDSS: Rootkit Technologies at the Heart of Cybercrime
Thu, 05 Aug 2010 10:43:00 +0200
TDSS is the most powerful and complex rootkit to date. This universal malware can hide its own presence and that of other malware on an infected system while offering enhanced opportunities.
TDSS: Rootkit technologies at the heart of cybercrime
Thu, 05 Aug 2010 08:00:00 +0200
Hackers continue to exploit vulnerabilities in mainstream programs
Mon, 02 Aug 2010 09:17:00 +0200
Kaspersky Lab announces the publication of its Monthly Malware Statistics for July 2010