A worm that spreads through low security networks, memory sticks, and PCs without the latest security updates is posing a growing threat to users.

The malicious program, known as Conficker, Downadup, or Kido was first discovered in October 2008.

Although Microsoft released a patch, it has gone on to infect 3.5m machines.

Experts warn this figure could be far higher and say users should have up-to-date anti-virus software and install Microsoft’s MS08-067 patch.

According to Microsoft, the worm works by searching for a Windows executable file called “services.exe” and then becomes part of that code.

It then copies itself into the Windows system folder as a random file of a type known as a “dll”. It gives itself a 5-8 character name, such as piftoc.dll, and then modifies the Registry, which lists key Windows settings, to run the infected dll file as a service.

Once the worm is up and running, it creates an HTTP server, resets a machine’s System Restore point (making it far harder to recover the infected system) and then downloads files from the hacker’s web site.

Most malware uses one of a handful of sites to download files from, making them fairly easy to locate, target, and shut down.

But Conficker does things differently.

Anti-virus firm F-Secure says that the worm uses a complicated algorithm to generate hundreds of different domain names every day, such as mphtfrxs.net, imctaef.cc, and hcweu.org. Only one of these will actually be the site used to download the hackers’ files. On the face of it, tracing this one site is almost impossible.

Speaking to the BBC, Kaspersky Lab’s security analyst, Eddy Willems, said that a new strain of the worm was complicating matters.

“There was a new variant released less than two weeks ago and that’s the one causing most of the problems,” said Mr Willems

“The replication methods are quite good. It’s using multiple mechanisms, including USB sticks, so if someone got an infection from one company and then takes his USB stick to another firm, it could infect that network too. It also downloads lots of content and creating new variants though this mechanism.”

“Of course, the real problem is that people haven’t patched their software. If people do patch their software, they should have little to worry about,” he added.

Technicians have reverse engineered the worm so they can predict one of the possible domain names. This does not help them pinpoint those who created Downadup, but it does give them the ability to see how many machines are infected.

“Right now, we’re seeing hundreds of thousands of unique IP addresses connecting to the domains we’ve registered,” F-Secure’s Toni Kovunen said in a statement.

“We can see them, but we can’t disinfect them – that would be seen as unauthorised use.”

Microsoft says that the malware has infected computers in many different parts of the world, with machines in China, Brazil, Russia, and India having the highest number of victims.

Source BBC

Are you the parent of a teenager?  If so, there is a good chance that you are wondering about their safety online, as you should be.  Although the internet has changed for the better, that change has made it easier for people to access the internet and pretend to be someone that they are not, someone who you would likely not want socializing with your child.  For that reason, you are advised to take the proper action needed to protect your child when they are online, especially when they use online social networking websites.

Online social networking websites?  What are they?  If you are not an internet user yourself, you may be completely unaware of social networking websites, what they are, and how they operate.  The first step in protecting your teen is to famialrize yourself with them.  Social networking websites are known as online communities that aim to connect internet users with each other.  Unfortunately, these social networks have become the stomping grounds for many online predators and who are they after?  Teenagers and chances are your teen may be one of them.

When it comes to protecting your child, your first thought may be to prohibit the use of online networking websites. Of course, you can do this if you want to.  You are the parent, you can do anything that you want; however, there is really no need to. Despite the fact that danger exists, social networking sites are relatively safe, even for teenagers.  However, to be safe and stay safe, your teenager needs to know what to avoid and who to be on the lookout for.  Essentially, this means that they best way to protect your child from online predators is to educate them on the danger that is out there.

One of the first things that you may want to discuss with your child is who they are talking with online. Although they may not want to give you an answer, you need to emphasize the importance of knowing who they are talking to. Since social networks work to connect individuals who do not physically know each other it may seem impossible, but it can be done. Your child should fully read and try to understand the content of their friend’s online profiles. This will enable them to watch out for inconsistent stories or any inaccurate information.  Tell your teen that if they learn that someone is being untruthful they need to end the conversation right away. 

In addition to who your teen is taking to, it is also important to learn what they are talking about. As with who they are talking to, your teenager may not want to give you a straight answer. Even if you are unable to get an answer out of them it is important to let them know what is appropriate and what is not. Be sure they know that it is best to completely avoid individuals who like to speak of sex, drugs, and other illegal activities.  Although they  may enjoy having a number of online friends, there are plenty of other individuals, especially teenagers, who would more than willing to have pleasant and harmless conversations with them.

Perhaps, the most important thing to discuss with your teenager about social networking sites is arranging physical meetings.  Let them know that these meeting are unacceptable.  There have been numerous reports, over the past few years, of teenagers being lured away from their home in hopes of meeting a new friend, who they thought was their age.  Unfortunately, many of these online friends turn out to be older and, in many cases, sexual predators.  In the event that your teenager wants to meet an online friend and you feel that they would with or without your permission, you may want to offer to go with them. Of course, it is advised that you use caution and all meet in a public place. 

By keeping the above mentioned points in mind, your child should still be able to use social network sites, but use them safely. In addition to the above mentioned safety concerns and precautionary measures, you may have your own.  Whether you do or not, it is important that you keep your child aware of the dangers that lurk online, awareness is the key.