[Excel Consulting Ltd.]

 

[Home Page] [Table of Contents] [Excel News] [Goods and Services] [Support Resources] [Site Search] [Leave Feedback]

Security Alert

 

Microsoft has admitted that hackers have taken advantage of unknown bug in Windows to infect computers with the new Duqu virus!

Last updated at 1:21 AM GMT on 3rd November 2011

Microsoft Corp said hackers exploited a previously unknown bug in its Windows operating system to infect computers with the Duqu virus, which some security experts say could be the next big cyber threat. 'We are working diligently to address this issue and will release a security update for customers,' Microsoft said on Tuesday in a short statement.

News of Duqu surfaced in October when security software maker Symantec Corp said it had found a mysterious computer virus that contained code similar to Stuxnet, a piece of malicious software believed to have wreaked havoc on Iran's nuclear programme.

Separately, Symantec researchers said they believe hackers sent the virus to targeted victims via emails with tainted Microsoft Word documents attached. If a recipient opened the Word document and infected the PC, the attacker could take control of the machine and reach into an organization's network to propagate itself and hunt for data, Symantec researcher Kevin Haley said.

Windows XP Critical Update Expected Soon

The most important thing to do to reduce your risk of getting hit by this or any other nasty virus is to make sure that your windows security updates are up to date.  Click on Start, All Programs, then run Windows Update and install all critical security updates that it finds.  To check if you have a specific patch, once releasaed, on Windows 2000 or XP, you can go to the Control Panel, and run Add/Remove Programs.  On Vista or Windows 7, go to Control Panel, and run Programs and Features. Make sure the option to display updates is checked at the top, and then scroll down to the bottom and look for Security Update for Windows expected any day now.

Check back here or Search the web for more information on the planned Microsoft Knowledge Base article on the patch to fix the Windows bug that will prevent the Duqu virus infections.

 

If I Have Virus Protection, Why Is This Such A Big Deal?

Even though the risk of infection is minimal for computers that have installed the latest Microsoft security updates, experts predict that there are potentially millions of computers around the globe that, are not protected, and many of these are quite likely infected. 
A network of this magnitude creates an army of computing power that can be used for any number of malicious purposes, from harvesting personal and financial information to performing online attacks such as a denial of service on large corporations.

Duqu is classed as a virus because of how it spreads.  It exploits a yet to be published Windows vulnerability
which allows it to load directly into an non-patched computer by taking advantage of a design flaw in the Windows networking software, when and infected Word document is opened.  Once it gets in, it will disable your antivirus, and block access to security update sites.  It will then allow a remote attacker to take over remote control of your computer and search for .  Additionally, it can spreads through network shares and removable drives like [USB Flash Drives].

Conflicker.C, the third variant of a self spreading family of worms, was first detected on December 31, 2008.  The first version, Conficker.A was first discovered in October 2008.  It affects all versions windows from Win98, through servers 2008.  It waits patiently on infected systems until certain dates pass before it takes action.  After January 1, 2009, it began to download reinforcements from a certain website affected computer.  It is estimated that there are already several million infected systems out there, that will experience major havoc on April 1, 2009.  Hopefully, you won't experience this first hand!

What You Can Do to Reduce Risks

You can greatly reduce your risk of getting this infection do these six steps on all computers in your home or office.  Remember that you are only as safe as the weakest link in your network, so check all of your systems.

1)       Make sure that you have Windows XP Critical Updates installed on your system.

2)       Verify the three main settings in the Windows Security Center in the Control Panel:

 

2.1)  Windows Firewall is turned on and working.

2.2)  Windows Automatic Updates are turned on.

2.3)  Anti-Virus Protection is installed, working and up-to-date.  [full colour AVG Icon in System Tray].

3)      Practice Safe Surfing Techniques - Don't trust any websites, even if they appear to be legitimate.

3.1)    Never open any unknown or unexpected email attachments, even from someone that you know.

3.2)    Never download free software games, screen savers, tools, or software of any kind unless you are certain that they are from well known, well established, websites from reputable companies.
 
3.3)    Never click anywhere on any pop-up windows that offer to speed-up your Internet or scan for and remove unwanted software.  Those pop-ups are often the virus themselves, with the whole window acting as one big button that says take me I'm yours -- if you click anywhere on them, even the [X] or Cancel Button, you give it permission to download and install into your PC.  Instead, press Control-Alt-Delete [at the same time] and then use the Windows Task Manager to terminate the pop-up window.

4)      Always Make use strong passwords for all of your system, network, and email accounts.  Strong passwords are more difficult to guess, and have at least 8 characters, and some from at least three of the following four categories: [Upper Case, Lower Case, Digits, Punctuation]  For example: "My-T0p.40"


Computer Worm vs. a Virus              
 Wikipedia Worm Definition

A computer worm is a self-replicating computer program.  It uses a network to send copies of itself to other nodes (computers on the network) and it may do so without any user intervention. Unlike a virus, it does not need to attach itself to an existing program. Worms almost always cause at least some harm to the network, if only by consuming bandwidth, whereas viruses almost always corrupt or modify files on a targeted computer.
 

Please contact our webmaster [
feedback
] with any questions or comments.
Copyright © 2008  Excel Consulting Ltd.
Last modified: April 11, 2008