Tuesday, January 20, 2009

Filled Under:

Worst virus in years infects 6.5 Million computers

A computer virus attack that has infected more than 6.5 million Windows PCs this week is one of the worst in years, internet security firm F-Secure said Friday.

In total the worm, which is known as Downadup or Conficker, has infected nearly nine million PCs since its first version was unleashed two years ago.

Microsoft says the worm exploits a bug in the Windows Server service used by Windows 2000, XP, Vista, Server 2003 and Server 2008.

The worm works by searching for a Windows executable file called "services.exe" and then becomes part of that code. Once it's embedded in a PC, Downadup generates a list of possible domains, selects one, then uses that domain to reach a malicious server from which it downloads additional malware to install on the hijacked computer.

The latest version of the virus is particularly nasty since it uses a complicated algorithm to create hundreds of new domains, making it much harder for security experts to shut it down.

0 comments:

Post a Comment

Blog Archive