It's a worm called: Downandup, Downadup, Kido!, or Conficker (all the same thing), and it primarily seems to be being delivered via infected USB drives.
It works by tricking you into thinking you are opening up a file from _________ (whatever drive you plug in). When you plug in the USB device an autoplay window pops up, naming the device & the drive letter. You've probably seen it a hundred times.
Directly below it there is a folder that says "Open folder to view files - Published by Microsoft Windows". If you click it you have just installed the virus.
If you look closer you'll see another set of commands under "General options" Those are the real commands. One says "Open folder to view files - using Windows Explorer", the next one says "Speed up my system - using Windows ReadyBoost". Both of these are legitimate.
I hate this stuff. Seriously, it's the worst thing the tech guys out there have to deal with. Supposedly F-Secure has a fix for it but from what I've heard it is iffy at best.
Here's a link to a screenshot of it. Remember, don't click on the top option.
Sorry to geek out. I will return to my normal vapidness with the next post.
Thanks for the heads up :) Geek speak isn't always so bad!
ReplyDeleteI hate viruses!!!
All I have to say is AV360. Makes Conficker look like a saturday morning cup of coffee.
ReplyDelete