Recently, a worm called incaseformat broke out in China. After the worm is executed, it will self-replicate to the Windows directory of the system disk and create a registry to start automatically. Once the user restarts the host, the virus matrix will be executed from the Windows directory. The process will traverse all disk files except the system disk and delete them, causing irreparable losses to the user!
At present, users in different industries have been found to be infected in many regions of the country, and the spread of the virus has not been clearly targeted.
Incaseformat virus origin
iincaseformat is a virus that has been discovered before 2014. The virus caused an error in the value of the IMSecsPerDay variable, which eventually caused the DecodeDate to calculate and convert the current system time incorrectly. Due to the above reasons, this sample is an old virus and will not trigger the code logic to delete user files until January 13, 2021.
How does it spread?
The main way for the virus to spread is U disk, Windows sharing, email, etc. It is not enough to install anti-virus software on the computer to deal with the virus. Incaseformat is more "smart" than common worms, and it will pretend to be a folder icon , And has the logic to delete files regularly. Even, it can put itself into the trust zone of anti-virus software, and successfully escape the interception of anti-virus software. Once the set time is met, it will start to hide other disk files outside the C drive and generate the exe file corresponding to the folder icon. Many files have been compromised by viruses.
The incaseformat worm has super spreading ability. Once it controls a computer, it will be used as a host, and it will continue to replicate itself to infect other computers, making the number of poisonings multiplying! Because it can pretend to be other files, it can escape security software Schools, print shops, and companies are all hardest hit by worms!
Don't panic! Inspur Cloud escorts you. Inspur Cloud has rich experience in virus processing and overall end-to-end security backup solutions, providing users with professional response and defense solutions.
