EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

01.22.09

One Windows Worm, One Week, and Possibly 250,000,000+ New Windows Zombies

Posted in Microsoft, Security, Windows at 6:14 am by Dr. Roy Schestowitz

Time for urgent “Change”

THIS IS A HUGELY important issue that we tracked a few days ago. We already knew that almost 1 in 2 Windows PCs had become zombie PCs, but it keeps getting worse. According to this report, as many as one in three Windows PCs may have been occupied by one single worm in a matter of just days! That’s how serious it is.

The computer worm responsible for the biggest attack in years has infected at least 1 out of every 16 PCs worldwide, a security company said Wednesday, and may have managed to compromise as many as nearly 1 in 3.

This may be the right time to contract law-makers or regulators and make a request for new laws to be applied to bad platforms that can leave people dead.

The victims of this latest storm are so many and the BBC says that even a UK-based Fire and Rescue service is downed by its use Windows, which came under virus attack.

Strathclyde Fire and Rescue has said its IT network has “come under attack from a computer virus”.

Once again, this is costing lives.

Vista and Vista 7, as we pointed out a few days ago, are not immune. It’s more of the same.

Windows worm trickery for Vista

The Conficker virus has opened a new can of worms for security experts.

Drives such as USB sticks infected with the virus trick users into installing the worm, according to researchers.

Microsoft would like naive reporters to propagate the perception that this could happen to anyone, but it was Microsoft itself that said: “Our products just aren’t engineered for security.” Well, now they find out?

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

8 Comments

  1. David Gerard said,

    January 22, 2009 at 9:50 am

    Gravatar

    I’m quite pleased to see that press articles I’ve seen on the subject make it clear this is a Windows problem, not one that affects all computers.

    (One story suggested in the headline it would affect Linux systems running Wine – which is a real concern, as Wine is good enough to run most worms – but the end of the story asked if anyone had seen Conficker running in Wine and could verify it actually did anything. ?!)

  2. Roy Schestowitz said,

    January 22, 2009 at 10:27 am

    Gravatar

    That’s like saying that the chef is dangerous because he carries a knife (for chopping carrots and stuff).

  3. David Gerard said,

    January 22, 2009 at 10:38 am

    Gravatar

    Well, yeah. It’s quite easy for an app to break out of its WINEPREFIX (referred to as “bottles” in CrossOver), so Wine-aware malware could certainly trash your home directory, try to read your Firefox passwords, etc. (This is not easy to reliably secure against, and the Wine project isn’t bothering to try. If you really want to run toxic waste in Wine, create a new user and do it there.) However, much like theoretical Mac OS X or Linux viruses, there remain 0 examples in the wild.

  4. David Gerard said,

    January 22, 2009 at 10:39 am

    Gravatar

    The key point was, the article was basically an attention-grabbing headline that was actually a complete lie. Ad-banner trolling.

  5. Roy Schestowitz said,

    January 22, 2009 at 10:44 am

    Gravatar

    Which article?

  6. David Gerard said,

    January 22, 2009 at 3:25 pm

    Gravatar

    This one:

    http://network.itproportal.com/articles/2009/01/21/linux-windows-7-beta-could-be-hit-downadup-worm/

    Page 1: “Furthermore, there are rumours that even Linux could be affected by the Worm if they run Wine, an application that allows Linux to execute programs written for the Windows environment. In theory, the virus would only affect the Windows partition rather than the whole operating system.”

    Page 2: “It would be great if someone could confirm the Linux rumours and Wine’s autorun.inf capabilities.”

    i.e. we made up some rubbish to give a splash headline.

  7. Roy Schestowitz said,

    January 22, 2009 at 3:30 pm

    Gravatar

    Extra extra!

    Chef Could Murder Waiter

    Page X: “It would be great if someone could confirm the chef cut the waiter and not onions.”

  8. Yggdrasil said,

    March 31, 2009 at 7:18 pm

    Gravatar

    Where exactly do you get this figure of 250 million? That number is 100 million more than the total number of Internet users in the United States alone. One of your references from Panda Security suggests rates anywhere from 1 in 16, all the way to 1 in 3. Why so high? Because as the article states, Panda security based this data on machines that had come to the website to have their machine scanned. Imagine the percentage of people who go to the doctor due to symptoms of illness, you might find a high percentage who are sick. Everything else was pure speculation, with little hard evidence. While, I’m not surprised you use the worse figure you could find, I’m surprised you don’t better analyze the sources you use to test their integrity. This reflects poorly on you.

    Late January, UPI reported 15 million Conficker infections:

    http://www.upi.com/Top_News/2009/01/25/Virus_strikes_15_million_PCs/UPI-19421232924206/

    But the real nitty gritty from the article is here:

    “Symantec noted on its blog last week that very few computers in North America had been infected, a trend which it attributed to the greater prevalence of legal and fully patched software.”

    In several other places on this site you note that there is no way to be safe with Windows, yet as the article shows, legitimate installed were not affected. Not only because security updates are downloaded, but since XP SP2 the Windows Firewall is enabled by default.

    While you dispute the obscurity of Linux on the desktop, it’s interesting to note that even popular distros like Ubuntu do NOT have a firewall enabled be default. This is unwise, regardless of how many countless security updates are installed.

What Else is New


  1. The Death of Software Patents and Microsoft's Coup Against Yahoo! Made the Company Worthless

    A look at what happens to companies whose value is a house of software patents rather than code and a broad base of users/customers



  2. Munich Attack Mentioned by EPO But Not Ansbach

    The EPO does the usual right-wing thing (exploiting disaster/emergency for domestic crackdowns), but some bemoan the omission of the explosion at Ansbach (also in Germany)



  3. Kluwer Thinks People Are Clueless About the Unitary Patent System and Pretends It's Business as Usual

    Flogging the dead UPC horse at times of great uncertainty (enough to bring the UPC to a standstill)



  4. Almost Everything That the Government Accountability Office Says is Applicable to the EPO

    The Government Accountability Office in the United States produces reports which can serve as a timely warning sign to the European Patent Office, where patent quality is rapidly declining in order to meet 'production' goals



  5. Microsoft Says It Loves Linux, But Its Anti-Linux Patent Trolls Are Still Around and Active

    Highlighting just two of the many entities that Microsoft (and partners) use in order to induce additional costs on Free (as in freedom) software



  6. Links 26/7/2016: Microsoft Growing Desperate, Linux 4.8 Visions

    Links for the day



  7. Links 25/7/2016: Linux 4.7 Final, PostgreSQL 9.6 Beta 3

    Links for the day



  8. Leaked: Boards of Appeal Face 'Exile' or 'Extradition' in Haar After Standing up to Battistelli

    A look at some of the latest moves at the European Patent Office (EPO), following Battistelli's successful coup d’état which brought the EPO into a perpetual state of emergency that perpetuates Battistelli's totalitarian powers



  9. The US Government Accountability Office (GAO) Comes Across as Against Software Patents, Relates to the EPO as Well

    Some analysis of the input from the Government Accountability Office (GAO) with focus on the EPO and software patents



  10. In the US, Patent Trolls Engage in Patent Wars and Shakedowns, Whereas in China/Korea Large Android OEMs Sue One Another

    Highlighting some of the differences between the US patent system and other patent systems



  11. Links 24/7/2016: Elive 2.7.1 Beta, New Flatpaks and Snaps

    Links for the day



  12. Links 23/7/2016: Leo Laporte on GNU/Linux, Dolphin Emulator’s Vulkan Completion

    Links for the day



  13. Links 22/7/2016: Wine 1.9.15, KaOS 2016.07 ISO

    Links for the day



  14. Haar Mentioned as Likely Site of Appeal Boards as Their Eradication or Marginalisation Envisioned by UPC Proponent Benoît Battistelli

    Not only the Staff Union of the European Patent Office (SUEPO) is under severe attack and possibly in mortal danger; the increasingly understaffed Boards of Appeal too are coming under attack and may (according to rumours) be sent to Haar, a good distance away from Munich and the airport (half an hour drive), not to mention lack of facilities for visitors from overseas



  15. EPO Attaché Albert Keyack Viewed as Somewhat of a Mole, Reporting From the US Embassy in Brazil Until Shortly Before the Temer Coup

    Public responses to the role played by Albert Keyack on behalf of the United States inside the European [sic] Patent Office



  16. EPO Insiders Explain Why the EPO's Examination Quality Rapidly Declines and Will Get Even Worse Because of Willy Minnoye

    Public comments from anonymous insiders serve to highlight a growing crisis inside the European Patent Office (EPO), where experienced/senior examiners are walking away and leaving an irreplaceable bunch of seats (due to high experience demands)



  17. Patents Roundup: BlackBerry, Huawei, PTAB, GAO, Aggressive Universities With Patents, and Software Patents in Europe

    Various bits and pieces of news regarding patents and their fast-changing nature in the United States nowadays



  18. Glimpse at Patent Systems Across the World: Better Quality Control at the USPTO Post-America Invents Act (2011), Unlike the EPO Post-Battistelli (2010)

    While the EPO reportedly strives to eliminate pendency and appeal windows altogether (rubberstamping being optimal performance as per the yardstick du jour), the USPTO introduces changes that would strengthen the system and shield innovation, not protect the business model of serial litigants



  19. Blockstream Has No Patents, But Pledges Not to Sue Using Patents

    Blockstream says that it comes in peace when it comes to software patents, which triggers speculations about coming Blockchain patent wars



  20. Links 21/7/2016: Ubuntu 16.04.1 LTS, Linux Mint 18 “Sarah” Xfce Beta

    Links for the day



  21. Links 21/7/2016: An Honorary Degree for Alan Cox, Looks Back at DebConf16

    Links for the day



  22. EPO USA: Under Battistelli, the 'European' Patent Office Emulates All the Mistakes of the USPTO

    Conservative Benoît Battistelli is trying to impose on the European Patent Office various truly misguided policies and he viciously attacks anyone or anything that stands in his way, including his formal overseers



  23. Links 19/7/2016: ARM and Opera Buyout

    Links for the day



  24. Large Corporations' Software Patenting Pursuits Carry on in Spite of Patent Trolls That Threaten Small Companies the Most

    With unconvincing excuses such as OIN, large corporations including IBM continue to promote software patents in the United States, even when public officials and USPTO officials work towards ending those



  25. Battistelli Has Implemented De Facto EPO Coup to Remove Oversight, Give Himself Total Power, and Allegedly Give UPC Gifts (Loot) to French Officials

    Benoît Battistelli's agenda at the EPO is anything but beneficial to the EPO and suspicions that Battistelli's overall agenda is transitioning to the UPC to further his goals grow feet



  26. EPO Social [sic] Report is a Big Pile of Lies That Responsible Journalists Must Ignore

    A reminder of where the EPO stands on social issues and why the latest so-called 'social' report is nothing but paid-for propaganda for Battistelli's political ambitions



  27. Links 18/7/2016: Vista 10 a Failure, FreeType 2.7

    Links for the day



  28. Exploiting Perceived Emergencies/Disasters, Suspending the Rule of Law, and Suspending Judges: How Erdoğan is Like Battistelli, Except the Coup

    Pretexts for crackdown on law-abiding people or figureheads who are remote and independent the hallmark not only of Erdoğan but also the EPO's President, Benoit Battistelli



  29. The Impotence of Gene Quinn

    Attacking the enforcer of Alice v CLS because it's doing harm to his source of income, which makes him angry



  30. After the FTI Consulting-EPO Reputation Laundering Deal's Expansion in Germany Süddeutsche Zeitung 'Forgets' That the EPO Even Exists

    Relative apathy if not complete silence regarding the EPO at Süddeutsche Zeitung following reports of FTI Consulting's deal expansion (media positioning in Germany), with hundreds of thousands of Euros (EPO budget) thrown at the controversial task


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts