3.5 million computers infected with new worm

1st February 2009

A new Internet worm called Downadup, also known as Conficker, infected 3.5 million computers, allowing hackers to take control over them, reports F-Secure, a company specializing in IT-security and anti-viruses creation.
Russia hits the third position by the number of infected IP after China and Brazil. Note, tha each IP can stand for a lot of computers.
To get to a computer, the worm must be downloaded from the attackers` site. But this is a scheme many of us accustomed to - nothing new. The difference of Downadup is that it daily creates a lot of options of new domains. The next day only one of them is registered.
F-Secure is trying to get ahead of criminals, registering possible domains possible in advance. Downadup uses vulnerability in implementation of the RPC Microsoft protocol.
You can check whether your computer is infected by trying to visit the site or F-Secure. The worm will block it. As for removing the code, it is possible by downloading a special program.