Kaspersky Lab has alerted users to a new modification of the Kido worm, which differs from previous ones as it extends the Trojan functionality. A record for new Kido variants was added to Kaspersky Lab anti-virus databases on 7 March.
Net-Worm.Win32.Kido.ip, Net-Worm.Win32.Kido.iq, and other variants are all representative of this latest modification of Kido, which is capable of preventing anti-virus products from functioning effectively on infected machines, says the company.
In addition, Kaspersky says this variant of the malicious program also generates a dramatically increased number of unique domain names, which it can contact to download daily updates: 50 000 in contrast to the 250 generated and contacted by previous versions.
“So far, the new version of Kido isn't posing an epidemic threat,” says Vitaly Kamluk, senior anti-virus expert. “However, if existing versions of Kido are replaced by the latest variant, this could make life a lot more difficult for those trying to combat the authors of this malicious program.”
The Kido worm has Trojan Downloader functionality, which means it delivers other malicious programs to infected computers, Kamluk adds. “The first Kido infections were detected in November 2008.”
He advises users to install the relevant operating system security updates.
Share