View Single Post
  #2 (permalink)  
Old 04-25-2009, 05:01 AM
computerworks's Avatar
computerworks computerworks is offline
Senior Club Cobra Member
Visit my Photo Gallery
Lifetime Contributor
 
Join Date: Mar 2001
Location: Northport, NY
Cobra Make, Engine: Kirkham, KMP178 / '66 GT350H, 4-speed
Posts: 10,362
Not Ranked     
Default

As a preface, we get dozens of infected systems a week in our shop for repair... we have not seen a large number of Conficker, but there have been some.
Scarier, to me, is the 3 systems we got this week that have some rootkit variant that does not clean up with anything that we've found yet; we have to pull the hard drive and do a manual repair in a mule system.

Anyway, if you feel you have Conficker (remember a simple test is that you cannot reach web pages on Symantec or McAfee sites, but can see all others)..
... here is a credible free detect and repair tool from Sophos:

http://www.sophos.com/support/knowle...cle/54447.html

Download requires a simple free registration (that gets you their newsletter); you can remove yourself from the mailing list after the first one, if you like.

Conficker and variants are especially "interesting" since they can spread via USB memory sticks... a relatively new twist.

If you see a file on your stick called "autorun.inf or autoplay.inf" with a recent creation date and it is not a U3 equipped stick...be concerned.

And...remember, you can be protected against Conficker simply by installing the Latest Windows Updates and having an updated AV program installed.
Reply With Quote