"This is the first virus that's really focused on domain names as part of propagating the virus itself." said Byron Holland, CEO of the Canadian Internet Registration Authority, a non-profit organization that represents those who hold a
CIRA's strategy includes pre-emptively registering and isolating previously unregistered
That would make those names unavailable for anyone to register in order to set up a website to host the worm's "command and control" file. A list of the names has been predicted by security experts based on the worm's code.
In addition, CIRA is investigating and monitoring activity at names on the list that have already been registered and will "take appropriate action if suspicious activity is detected."