Tag Archives: virus

Conficker Worm Targets Microsoft Windows Systems

Original release date: March 29, 2009
Source: US-CERT

Systems Affected

  • Microsoft Windows

Overview

US-CERT is aware of public reports indicating a widespread infection of the Conficker worm, which can infect a Microsoft Windows system from a thumb drive, a network share, or directly across a network if the host is not patched with MS08-067.

I. Description

The presence of a Conficker infection may be detected if a user is unable to surf to the following web sites:

If a user is unable to reach either of these web sites, a Conficker infection may be indicated (the most current variant of Conficker interferes with queries for these sites, preventing a user from visiting them).  If a Conficker infection is suspected, the infected system should be removed from the network. Major anti-virus vendors and Microsoft have released several free tools that can verify the presence of a Conficker infection and remove the worm. Instructions for manually removing a Conficker infection from a system have been published by Microsoft in http://support.microsoft.com/kb/962007.

II. Impact

A remote, unauthenticated attacker could execute arbitrary code on a vulnerable system.

III. Solution

Posted in Alert, Technical | Tagged , , , | Leave a comment