Each and every day the caretakers of IT security (mostly companies dealing with anti-virus solutions) have to tackle innumerable threats that are unleashed. But the latest Stuxnet malware threat, that is exploiting the flaw in Microsoft Windows Shell, has the security community buzzing with various analysis and interpretations.

The Stuxnet malware is a sophisticated exploit of the simple flaw present in Windows Shell. This malware, disguised as a shortcut file (or in technical terms, a file with .LNK extension) uses USB-based removable drives, like pen drives, flash drives, portable hard drives, etc, as a medium to propagate, and infect the target systems. The inherent flaw in Microsoft Windows Shell permits this malicious shortcut file to be executed just by viewing pen drive contents in explorer. The worst part is, it cannot be stopped even by blocking the Autorun feature of the system and the USB drive, making it a tough cookie to crumble. In other words if you insert infected pen drive to a clean system and open the pen drive to see what it contains the malware gets executed automatically and infects the computer. If you see .LNK files are getting created in your pen drive automatically that means you are hit by Stuxnet malware.

But the surprise does not end here! An initial analysis revealed that the malware was exploiting Windows vulnerability, but upon closer inspection the plot started to thicken. The malware had a defense against detection by an anti-virus solution and this defense was digital signature of RealTek Semiconductors, a legitimate hardware vendor.

The outbreak of this malware is the highest in India, Indonesia and Iran. This has given rise to many speculative conclusions that the malware was designed in India (as India is the world leader is outsourced programming). “I cannot comment on the origin of this malware as it requires a thorough investigation and verifiable facts. Quick Heal Research Labs is doing what is needed to arrive at a feasible solution. But I would like to say one thing: prediction part be better left to Paul the Octopus. Researches should work on facts and findings” said Mr. Sanjay Katkar, CTO of Quick Heal Technologies (P) Ltd.

Microsoft has said that Windows incorrectly parses shortcut (.LNK) files allowing execution of malicious code when the icon a specially crafted shortcut file is displayed. Microsoft has also updated its advisory to include an automated “Fix It” solution that mitigates the bug’s risk by disabling icons from being displayed for shortcuts, which can prevent attacks attempting to exploit this vulnerability.

Quick Heal users whose copy is updated uptill 19th July 2010 need not worry about this malware as Quick Heal protects your PC against this malware automatically. Security experts at Quick Heal Technologies advise users to have updated anti-virus protection and to be careful when sharing pen drive. It is recommended to avoid connecting the pen drive to the system which is not protected by an updated anti-virus software.

About Quick Heal Technologies
Quick Heal Technologies is leading provider of Internet Security tools and is a leader in Anti-Virus Technology in India. A privately held company, Quick Heal Technologies was founded in 1993 and has been actively involved in Research and Development of anti-virus software since then. Serving millions of users worldwide, Quick Heal Technologies employs more than 350 people in eighteen branches with its headquarters in Pune, India. “Quick Heal” an award-winning anti-virus product is installed in corporate, small and medium businesses and consumers’ homes, protecting their PCs from viruses and other malicious threats. The company is focused to provide products and services of high quality and adapt to the ever changing needs of consumers’. Quick Heal Technologies has firmly established its position in India and also operates through a network of dealers and channel partners in more than 50 countries worldwide. Virus protection of data is a challenge that businesses, either small or big are faced with. Quick Heal Antivirus Software includes various features like Antispam, Anti Spyware, etc., and is extremely versatile ensuring virus protection.