Virtumundo now spreads via Sneakernet

The Virtumundo worm now is able to infect and spread via USB, CD-ROM or network share using Windows AutoRun, much like Conficker.

Sophos security researchers issued a warning that the Virtumundo trojan, also known as Virtumonde or Vundo, is now infecting computers via AutoRun, a Windows feature that enables files or programs to run immediately as soon as a removable media device, such as a USB stick or CD-ROM, is connected to a computer.

Virtumundo is an adware program that displays pop-up advertisements on the desktop and also downloads other software from various remote servers, according to researchers at Sunbelt Software. Ever-evolving, the trojan is capable of attaching itself to browsers and injecting fake entries into search results.

Go read the rest HERE

Leave a Reply

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>