Published on June 10th, 2012 | by James Johnson0
Flame Malware Begins Extinguishing Itself As Microsoft Investigates
The Flame malware which has infected computer systems in the middle east for the last two years is being extinguishing from infected computers, ultimately removing almost any trace of the virus.
Apparently the Flame virus is now being “doused” when compromised machines retrieve a file named browse32.ocx. The move is likely an attempt by spooked virus creators who want to avoid further detection by Microsoft and various anti-virus software firms.
Microsoft in the meantime has issued a fix to its Windows Server Update Services to stop future attacks. The new fix requires HTTPS inspection services to funnel Windows update traffic through an exception rule, allowing them to bypass its inspection.
According to Victor Thakur, principal security response manager at Symantec in an interview with the LA Times:
“They’re trying to cover their tracks in any way they can. They know they’re being watched.”