News

Downadup worm cited as the biggest cyber attack in years

A computer worm exploiting a bug Microsoft patched more than two months ago continues to wreak havoc, according to several security companies.

Taking advantage of a flaw in Windows, the virus-containing worm--Downadup--modifies the way "autorun" works when you plug in an external drive, such as a flash drive. Once installed, the virus will quickly spread to all unpatched machines on the network. Microsoft issued an emergency patch October 23 to fix the flaw with one of its rare "out of cycle" updates.

F-Secure has a detailed analysis on the clever way Downadup socially-engineers you into installing the malware yourself.

Panda Security has a free online antivirus scanner that you can use to find out if your computer is infected. (NOTE: while the scan is free, the removal tool will cost you $12.95 for 6-months' use.) Panda reports that 1-in-16 computers scanned by its online tool have been infected by Downadup.

SOLUTION:

1. Apply all Windows security patches.  The Microsoft Update page will determine which patches your system needs.

2. Run an antivirus scan on your computer; make sure your antivirus program is up to date.

3. If your antivirus program does not remove the virus, F-Secure has a removal tool that should get rid of it.