Tuesday, April 21, 2009


Announcement - Conficker Worm Threat

Malware Type: Conficker Worm
Infection Channel : Exploiting unpatched Microsoft Windows Operating Sytems
Platform: Windows 2000, XP, Vista, Server 2003
Damage potential: High
Distribution Potential: High


Conficker, also known as Downup, Downadup and Kido, is a computer worm that surfaced in October 2008 and targets the Microsoft Windows operating system. The worm exploits a previously patched vulnerability in the Server service used by Windows 2000, Windows XP, Windows Vista, Windows Server 2003, Windows Server 2008, Windows 7 Beta, and Windows Server 2008 R2 Beta.

Security Researchers have so far discovered four variants of the worm.

1. Win32/Conficker.A was reported to Microsoft on November 21, 2008
2. Win32/Conficker.B was reported to Microsoft on December 29, 2008
3. Win32/Conficker.C was reported to Microsoft on February 20, 2009
4. Win32/Conficker.D was reported to Microsoft on March 4, 2009

The Conficker worm is a computer worm that can infect your computer and spread itself to other computers across a network automatically, without human interaction. It is a standalone malicious program which uses computer or network resources to make complete copies of itself. It may include code or other malware to damage both the system and the network

The Conficker worm can also disable important services on your computer.

Solution :

Here's what you need to do to clean your PC.

Step 1 - Turn on your firewall- Point to Control Panel -> Network and Internet Connections ->Windows Firewall.

Step 2 - Update Windows. Open up Internet Explorer and go to Complete all urgent or required updates.

Step 3 - Verify that your antivirus software is switched on and up-to-date. You should have a "resident" (always running) antivirus software installed such as Norton, McAfee, AVG, Trend Micro, etc. Open your antivirus and see if it is running and updated. Update it if it is not. You can also go to Start Menu -> Control Panel -> Security Center to verify that the antivirus programme is running.

For additional information on the Conficker worm threat, please click on the below link:

Technical Details :


No comments: