Downadup (Conficker, Kido) infection

The first version of this virus which is recognized by AVG as Downadup (alternativelly I-Worm.Generic) has been detected at the end of November / begining of December, 2008. Currently there are over 300 unique versions of this virus. AVG detects and protects against all known variants of the worm, and also a special Removal Tool is available.

The main mean of infecting computers used by this virus is a security vulnerability in Windows operating systems, which is described in MS Security Bulletin MS08-67 released on October 23, 2008 (including links for respective Windows update files). Apart from using this security vulnerability, the virus spreads also across local networks by attacking weak passwords for shared folders, and using the Autorun function on removable devices.

To protect against the virus, it is necessary to install the mentioned Windows update and make sure your AVG is fully up-to-date. In case your computer is infected by this virus, it may not be possible to update your AVG Free correctly. In order to allow correct AVG Free update, please proceed as follows:

• Open Start -> Run.
• Type 'cmd'.
• In the opened command line windows type the following command and press Enter:
  net stop dnscache
• It will be possible to update your AVG Free now. Once updated, run an AVG scan to remove the infection:
  AVG Free -> Computer Scanner -> Scan whole computer
• When the scan is finished, please restart your computer.