Downadup variants use algorithmically determined URLs to report back to the bad guys.

Reverse engineering the worm's code provides us with the method to predict which domains may be used in the future.

Today's preemptive blocklist includes an additional 1,000 URLs that WILL BE used by the Downadup from the 13th to the 16th.

Network administrators can use this list as a preventive measure.

Click the image below to view the list: