The worm blocks access to protective services, downloads a Trojan and is programmed to seek out 50,000 domains on 1 April, as the authors of the worm try to outsmart security vendors

More...