Search My Blog

Saturday, January 31, 2009

Removing Confounding Conficker

Removing Confounding Conficker


Jason Lee Miller
Staff Writer
2009-01-23

SecurityProNews: Insider Reports Insider Reports RSS Feed


If you're one of an estimated ten million afflicted with the Conficker
worm, SecureWorks has proffered a workaround to clean it off your system.

Removing Confounding Conficker

Conficker, also known as Downadup, Kido, and Conflicker, is a
particularly nasty and smart virus spreadable via popular USB
devices-you know, those little, tartish gadgets that flit from computer
to computer without a thought?

Turns out, in addition to installing itself, copying itself, adjusting
the Windows TCP/IP settings, and spreading itself to all
removable/network devices, Conficker also disables Windows cleanup and
detection services, deletes system restore points, blocks Internet
access to Microsoft.com and other security service sites, and waits
three hours before trying to download additional code from 250 different
domain names generated and set up daily.

Go there...

http://www.securitypronews.com/insiderreports/insider/spn-49-20090123RemovingConfoundingConficker.html

Don

No comments: