14 DAY TRIAL // The USB sticks are assaulted once again after W32/Hairy-A, a Trojan file that affects the image of the famous novel Harry Potter. Security company Sophos discovered this problem and sustained that the worm is automatically copied onto a new memory stick connected to the USB port once the autorun function is started. A new document is also created and copied on the stick containing a simple line that says "Harry Potter is dead." In addition, the virus makes several new users in the Windows operating system, named after the characters of the novel: Harry-Potter, Hermione-Granger, Ron-Wasley.
"Much of the world is waiting with bated breath for the final Harry Potter novel, and the premiere of the new movie is looming too. There is a real danger that muggles will blindly allow their USB flash drives to auto-run and become infected by this worm," said Graham Cluley, senior technology consultant for Sophos. "Using such social engineering at this time is a trick dastardly enough for Lord Voldemort himself."
As usual, you're advised to keep your antivirus solution up-to-date with the latest virus definition and try to avoid connecting untrusted USB memory sticks containing unknown files.
"Seriously, the fact that this worm has been inspired by the tales of a fictional schoolboy wizard doesn't make it a harmless prank. A worm like this which infects and tampers with users' computers without their permission is committing a criminal act. Someone needs to get a little more sunshine in their diet and put their energies into a more positive pursuit than writing malicious code like this," the Sophos representative.
A few weeks ago Sophos discovered another threat that uses the USB memory sticks to spread itself, the security company saying that it is automatically copied on a flash drive when it is connected to the USB port.