
A computer worm, using many months ago in the Windows Server service, infected more than a million PCs in 24 hours, the Hacker reports.
On Wednesday morning, the Finnish company F-Secure estimated the total number of 3.5 million computer-infected Downadup worms, while clarifying that this number has increased by 1.1 million PCs since Tuesday. And, as the F-Secure researcher Sean Sullivan explains on the company's blog, this assessment is very restrained.
According to Lenta.ru , they are leading in the number of "converted bots", respectively, China, Brazil and Russia.
At the end of October last year, Microsoft released an extraordinary patch that covers the hole, using the worm, and also included its signature in their antivirus utility Malicious Software Removal Tool (MSRT), which is part of the monthly updates on Tuesdays.
F-Secure reported that as a result of studying the activities of the DownloadUp worm, they managed to find out how the procedure for monitoring all infected cars from hackers is carried out.
Using an integrated algorithm, the worm for each subsequent day generates a list of several hundred domain names, after which it is enough for attackers to register one of them and organize a website, gaining full access to infected computers.
In connection with the indicated problem, Microsoft recommends that all Windows users install the October update, and then start the January output of the MSRT to clean the computer.
Also, check if the computer is infected, you can, trying to go to the F-Secure website or Kaspersky Laboratory? The worm blocks them, and they do not open on infected computers.