[RTC List] Preparing for Conficker on April 1st

[robert beckerdite]

All,

 

  There is a component of the Conficker worm that is supposed to activate on the 1st of April. The work is supposed to contact its creators who will probably provide some direction to it.  If at all possible please make sure and address the issue in your business and for your clients prior to April 1st because experts agree removing the malware will get harder after the first.  My understanding is that Conficker will need to be removed prior to installing the patch after the 1st.  This means that computers will have to have all removable media and network connections removed prior to removing the virus and installing the patch.

  If you have stayed automatically up to date with windows update and your antivirus provider you may be okay.  I would recommend verifything by runing the windows update on microsofts site and checking the date of your antivirus signature.   Below are the some straight forward links for patching your computer and removing the worm. I would encourage everyone try and be sure that you have tried to address this prior to the first.  

 

Install MS08-067 to remove the exploit that allows conficker to install

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

 

Removal tool from Symantec

http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-011316-0247-99


Article on domains that Conficker will try and access

http://blogs.technet.com/msrc/archive/2009/02/12/conficker-domain-information.aspx

 


Robert Beckerdite
Senior Engineer and Owner
Beckerdite Consulting
(707) 703-1528
www.beckerdite.com




_________________________________________________________________
All-in-one security and maintenance for your PC.  Get a free 90-day trial!
http://www.windowsonecare.com/purchase/trial.aspx?sc_cid=wl_wlmail
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://redwoodtech.org/pipermail/list_redwoodtech.org/attachments/20090327/c3c334ee/attachment.html>