Kaspersky Lab has detected that multiple variants of Kido, a polymorphic
worm, are currently spreading widely.

Net-Worm.Win32.Kido exploits a critical vulnerability (MS08-067
(http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx)) in
Microsoft Windows to spread via local networks and removable storage
media.

The worm disables system restore, blocks access to security websites,
and downloads additional malware to infected machines.

Users are strongly recommended to ensure their antivirus databases are
up to date. A patch for the vulnerability is available
(http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx) from
Microsoft.

A detailed description of Net-Worm.Win32.Kido.bt and removal
instructions are available here
(http://www.viruslist.com/en/viruses/encyclopedia?virusid=21782725).