Nine Ball attack strikes 40,000 Web sites