India Broadband Forum

Rameshjeee · 01-17-09, 06:13 PM

Worst virus in years infects 6.5 mn computers

A computer virus attack that has infected more than 6.5 million Windows PCs this week is one of the worst in years, internet security firm F-Secure said Friday.

In total the worm, which is known as Downadup or Conficker, has infected nearly nine million PCs since its first version was unleashed two years ago.

'The number of Downadup infections (is) skyrocketing,' Toni Koivunen, an F-Secure researcher, said in an entry to the company's security lab blog. 'From an estimated 2.4 million infected machines to over 8.9 million during the last four days. That's just amazing.'

Computer users have little to fear if they keep their computers patched with the latest Microsoft security fixes, but Microsoft says that at least one third of PCs have not yet been updated.

Microsoft says the worm exploits a bug in the Windows Server service used by Windows 2000, XP, Vista, Server 2003 and Server 2008.

The worm works by searching for a Windows executable file called 'services.exe' and then becomes part of that code. Once it's embedded in a PC, Downadup generates a list of possible domains, selects one, then uses that domain to reach a malicious server from which it downloads additional malware to install on the hijacked computer.

The latest version of the virus is particularly nasty since it uses a complicated algorithm to create hundreds of new domains, making it much harder for security experts to shut it down.

01-17-09, 07:23 PM

wow , thats some number to worry about...

hitesh.07 · 01-18-09, 01:03 PM

what are its symptoms, how to find out if it has infected my system?

thats_me · 01-18-09, 09:27 PM

Quote:

Originally Posted by hitesh.07

what are its symptoms, how to find out if it has infected my system?

Quote:

SYMPTOMS:
Connection times out while trying to access various antivirus related websites.
Windows Update has been disabled.
Presence of autorun.inf files in the root of mapped drives pointing to a .dll file inside the RECYCLER folder of the drive.

Refer to remove it :

Win32.Worm.Downadup.Gen

Microsoft Security Bulletin MS08-067 – Critical: Vulnerability in Server Service Could Allow Remote Code Execution (958644)

hitesh.07 · 01-18-09, 09:50 PM

i have installed that patch, thanks for the bulletin link

thats_me · 01-18-09, 09:51 PM

Quote:

Originally Posted by hitesh.07

i have installed that patch, thanks for the bulletin link

Always welcome.

iamnew · 01-21-09, 07:10 AM

i am happy to annouce that my pc is officially infected with confliker virus.my nod32 says it quarentinned it.

cool_techie_tvm · 01-21-09, 01:49 PM

Keeping windows, AV softwares updated and configuring the TCP half open connections to something between 50 and 100 should help the commoners to escape from this worm.

smoothvibes · 01-21-09, 01:52 PM

this worm can not enter your system if you got a good and updated version of internet security software, most of the anti virus softwares can detect and kill this.

DM111PUSP · 01-23-09, 11:44 PM

If you are using Genuine Windows, then always keep your system is up-to-date with Microsoft updates.

Otherwise use a good antivirus and keep it up-to-date, to prevent yourself from theese kind of threats.

thats_me · 01-25-09, 06:18 PM

Quote:

Originally Posted by DM111PUSP

If you are using Genuine Windows, then always keep your system is up-to-date with Microsoft updates.

Otherwise use a good antivirus and keep it up-to-date, to prevent yourself from theese kind of threats.

I'd recommend that you do both: Upgrade Windows + Use good Security Software.

01-17-09, 06:13 PM	#1
Rameshjeee Aadhavan is Coming Join Date: Aug 2008 Location: Leaving Chennai Age: 26 Posts: 3,075 Rep Power: 10	Worst virus in years infects 6.5 mn computers Worst virus in years infects 6.5 mn computers A computer virus attack that has infected more than 6.5 million Windows PCs this week is one of the worst in years, internet security firm F-Secure said Friday. In total the worm, which is known as Downadup or Conficker, has infected nearly nine million PCs since its first version was unleashed two years ago. 'The number of Downadup infections (is) skyrocketing,' Toni Koivunen, an F-Secure researcher, said in an entry to the company's security lab blog. 'From an estimated 2.4 million infected machines to over 8.9 million during the last four days. That's just amazing.' Computer users have little to fear if they keep their computers patched with the latest Microsoft security fixes, but Microsoft says that at least one third of PCs have not yet been updated. Microsoft says the worm exploits a bug in the Windows Server service used by Windows 2000, XP, Vista, Server 2003 and Server 2008. The worm works by searching for a Windows executable file called 'services.exe' and then becomes part of that code. Once it's embedded in a PC, Downadup generates a list of possible domains, selects one, then uses that domain to reach a malicious server from which it downloads additional malware to install on the hijacked computer. The latest version of the virus is particularly nasty since it uses a complicated algorithm to create hundreds of new domains, making it much harder for security experts to shut it down.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Sify Broadband ---> Worst of the Worst	India Broadband	Sify broadband	1	11-22-09 04:45 PM
make virus by yourself,,,,,,,,,,,	Mr.Tooth Fairy	Software News, Previews and Reviews	9	10-18-08 11:29 PM
Which is the worst Anti Virus You have come across	mwaraitch	Software News, Previews and Reviews	0	09-23-08 02:02 AM
McAfee predicts 400,000 virus definitions in next two years	India Broadband	Software News, Previews and Reviews	0	07-17-06 01:15 AM

01-17-09, 07:23 PM	#2
newprouser Guest Posts: n/a	wow , thats some number to worry about...

01-18-09, 01:03 PM	#3
hitesh.07 Junior Member Join Date: Aug 2008 Location: Bangalore Posts: 50 Rep Power: 2	what are its symptoms, how to find out if it has infected my system?

01-18-09, 09:50 PM	#5
hitesh.07 Junior Member Join Date: Aug 2008 Location: Bangalore Posts: 50 Rep Power: 2	i have installed that patch, thanks for the bulletin link

01-21-09, 07:10 AM	#7
iamnew Junior Member Join Date: Jan 2009 Age: 19 Posts: 41 Rep Power: 1	i am happy to annouce that my pc is officially infected with confliker virus.my nod32 says it quarentinned it.

01-21-09, 01:49 PM	#8
cool_techie_tvm Amor vincit omnia Join Date: Dec 2007 Posts: 2,682 Blog Entries: 4 Rep Power: 4	Keeping windows, AV softwares updated and configuring the TCP half open connections to something between 50 and 100 should help the commoners to escape from this worm.

01-21-09, 01:52 PM	#9
smoothvibes Aditya Join Date: Jul 2008 Location: New Delhi/ London Posts: 4,914 Rep Power: 11	this worm can not enter your system if you got a good and updated version of internet security software, most of the anti virus softwares can detect and kill this.

01-23-09, 11:44 PM	#10
DM111PUSP Bronze Member Join Date: Dec 2008 Posts: 132 Rep Power: 1	If you are using Genuine Windows, then always keep your system is up-to-date with Microsoft updates. Otherwise use a good antivirus and keep it up-to-date, to prevent yourself from theese kind of threats.

India Broadband Forum

Worst virus in years infects 6.5 mn computers

Worst virus in years infects 6.5 mn computers

Similar Threads