Win32/Bundpil.BO

Win32/Bundpil.BO is a computer worm that is being used to target computer users in India. Like many worms, Win32/Bundpil.BO spreads using removable memory devices and similar media. Security analysts have identified Win32/Bundpil.BO among the top threats of 2014 and Win32/Bundpil.BO is one of the newest types of attacks. Still, Win32/Bundpil.BO is not as favored as most threat attacks that exploit AutoRun vulnerabilities in targeted computers. If there is a chance that your computer has been exposed to Win32/Bundpil.BO, PC security researchers strongly advise taking steps to protect your machine with an anti-malware application. Failure to detect and remove Win32/Bundpil.BO may result in the loss of data and additional threats being installed in the infected computer.

Win32/Bundpil.BO and Its Variants Have been Attacking PC Users in Mongolia and Afghanistan Systematically

Bundpil is a threat family that is relatively recent. The Win32/Bundpil.BO variant was first detected in July of 2013 and widespread attacks involving Win32/Bundpil.BO were only first noted in February of 2014. Win32/Bundpil.BO and its variants account currently for about five percent of worldwide threat attacks involving similar threatening components. Win32/Bundpil.BO is especially widespread in Mongolia and Afghanistan, where Win32/Bundpil.BO is the one to be blamed for more than a quarter of all threat attacks.

How Win32/Bundpil.BO's Attacks Work

There are several variants of Win32/Bundpil.BO, all functioning in similar ways. As soon as a removable memory device infected with Win32/Bundpil.BO is inserted into the infected computer, Win32/Bundpil.BO may automatically install copies of itself on all local directories, searching especially for other removable memory devices and shared folders. Win32/Bundpil.BO includes a URL to which Win32/Bundpil.BO connects and attempts to download its configuration files and other threats. Win32/Bundpil.BO connects to a remote server using the HTTP protocol. The main purpose of Win32/Bundpil.BO is to delete files on the victim's computer. Win32/Bundpil.BO may search for EXE, VBS, PIF, CMD and BACKUP files on the victim's computer and delete them as part of its attack. This makes Win32/Bundpil.BO quite destructive and potentially risky for the infected computer, the main reason Win32/Bundpil.BO should be removed at once.