W32.Downadup.B (according to Symantec EndPoint), also known as Win32 / Conficker.B by McAfee, and the antivirus program Net-Worm.Win32.Kido.ih is actually a worm that spreads by modifying a vulnerability in a Microsoft Windows server. About Remote Code Execution in Service RPC Management (BID 31874).