How a Microsoft blunder opened millions of PCs to potent malware attacks