There is a group actually watching the botnet and the irc server it's been connecting to, they estimate 500k in unique IP's. Now this isn't the total, some of those IP's are behind routers at businesses who might have 100 machines. They still have no idea what this thing is planning on doing...could it be activated on tuesday?
hmm On Mon, Jan 19, 2009 at 2:40 PM, Jeff Wright <[email protected]> wrote: > > -----Original Message----- > > Google News gives me one hit for "downadup" (in Turkish) and 249 hits > > on "downandup" (mostly in English). But you have far more experience with > > malware than I so Turkish it is. You tell those other pubs to > > straighten up. > > Here's what I got: Results 1 - 10 of about 1,740,000,000 for downadup. > (0.26 seconds) > > > http://www.google.com/search?client=firefox-a&rls=org.mozilla%3Aen-US%3Aoffi > cial&channel=s&hl=en&q=downadup&btnG=Google+Search<http://www.google.com/search?client=firefox-a&rls=org.mozilla%3Aen-US%3Aofficial&channel=s&hl=en&q=downadup&btnG=Google+Search> > > PEBCAK. Now stop annoying Google. > > > Infection estimates now at 10,000,0000 and "spreading fast." > > I've read about this estimate and this number was derived from looking at > results in the worm's code itself, making this calculation dubious. I'd > place that number somewhere between WAG and spot-on. > > What's odd about the percentages of OS versions in the article I linked to > is how much of it is Windows XP SP2, which turned on the firewall and > auto-updates by default. That tells me that the users of these machines > received them either very poorly configured or they themselves > intentionally > disabled these security components. > > Of course, the infection effort fails if you: > > A) Don't run as admin, and > B) Don't have a pathetically easy-to-guess admin password, or > C) Patch your system > > > Just close your eyes, click you heels together, and recite "Windows is > > double plus good. There is nothing to worry about." > > I did that and when I opened my eyes, there was my Windows 7 Beta (and its > betta). Mmmm, mmmm good. Looking forward to the RTM version! > > > ************************************************************************* > ** List info, subscription management, list rules, archives, privacy ** > ** policy, calmness, a member map, and more at http://www.cguys.org/ ** > ************************************************************************* > -- Make sure you support your local CarbonONset programs! ************************************************************************* ** List info, subscription management, list rules, archives, privacy ** ** policy, calmness, a member map, and more at http://www.cguys.org/ ** *************************************************************************
