Downadup worm variant identified
BitDefender researchers in the Antimalware Labs have identified a new variant of the Downadup/Conficker worm, able to circumvent detection and disinfection using the removal tools created for its previous versions.
In addition to blocking access to any Web site of anti-virus vendors, as well as third parties offering online scanning services or removal tools, the malicious binary has been updated to refuse users access to http://bdtools.net, BitDefender’s online repository for distributing disinfection and removal tools.
Updated disinfection tools are now available online at www.disinfecttools.com, a domain that is not currently blacklisted on the compromised machines.
"Since the new variant blocks bdtools.net the new recommended domain name is www.disinfecttools.com (from our preliminary analysis this is not blocked by the malware)," says Viorel Canja, head of BitDefender Labs.
Loading ...