New worm 'Conficker, Downadup, or Kido' knocking windows with low security networks
⊆ 7:58 PM by Nikhil | Computer , Geek , Latest , Security . | ˜ 8 comments »
According to Microsoft, the worm works by searching for a Windows executable file called "services.exe" and then becomes part of that code.
It then copies itself into the Windows system folder as a random file of a type known as a "dll". It gives itself a 5-8 character name, such as piftoc.dll, and then modifies the Registry, which lists key Windows settings, to run the infected dll file as a service.
Once the worm is up and running, it creates an HTTP server, resets a machine's System Restore point (making it far harder to recover the infected system) and then downloads files from the hacker's web site. ......Read MoreThe worm's replication methods is quite good. It uses multiple mechanisms, including USB drives, so if someone got an infection from one company and then takes his USB stick to another firm, it could infect that network too. The worm also downloads a lots of content and creats new variants though this mechanism.
Security Update to prevent worm infecting your computer Microsoft Security Update and to keep it more safe download Malicious Software Removal Tool.Notorn Patch for removal of Downadup worm







