Menu

LEX File Exchange
EA Support Files
SC4 Wikipedia
Network Addon Mod
Dependencies
Chat
Welcome, Guest. Please login or register.
Did you miss your activation email?

July 24, 2021, 08:48:18 AM

Login with username, password and session length

Author Topic: Conflicker C.  (Read 1890 times)

0 Members and 1 Guest are viewing this topic.

Offline choco

  • NAM Team
  • Forums Senator
  • *
  • Posts: 783
  • Total likes: 19
  • Reputation: 10
  • "bridge" engineer...
  • CL: SC4 Bridgemeister
Conflicker C.
« on: March 30, 2009, 10:23:48 AM »
Hi all!

its been getting more widespread converage, but the Conflicker C. worm (linkie) is set to activate on April 1st.  its a fairly nasty virus, so please take the time to check your PC's and especially your servers. 

http://forums.mcafeehelp.com/showthread.php?t=225901
http://www.pcworld.com/article/157876/protecting_against_the_rampant_conficker_worm.html

please ask if you have any questions  :)

Offline Jonathan

  • NAM Team
  • Forums Guru
  • *
  • Posts: 2609
  • Total likes: 6
  • Reputation: 25
  • CL: Einstein, Jr. &scl()
Re: Conflicker C.
« Reply #1 on: March 30, 2009, 01:05:52 PM »
So exactly do we protect against this, the articles say of a MS update, my update history only shows updates this year? I have no updates that need to be installed at the moment, so do I assume I have the update? And is there some tool that will tell you if you are infected?

Jonathan

Offline Pat

  • when life tosses you lemons, make lemonade!
  • 3RR Team
  • Forums Legend
  • *
  • Posts: 8812
  • Total likes: 6
  • Reputation: 45
  • SC4D Podcast, You Know You Wanna Hear IT!!!!
  • CL: ()pathfire() gettin' it right!
Re: Conflicker C.
« Reply #2 on: March 30, 2009, 01:09:34 PM »
Jus to make sure I went and found the link on the Wiki to Microsoft here for the download of the patch

Don't forget the SC4D Podcast is back and live on Saturdays @ 12 noon CST!! -- The Podcast soon to Return Here Linkie

Offline choco

  • NAM Team
  • Forums Senator
  • *
  • Posts: 783
  • Total likes: 19
  • Reputation: 10
  • "bridge" engineer...
  • CL: SC4 Bridgemeister
Re: Conflicker C.
« Reply #3 on: March 30, 2009, 02:43:20 PM »
So exactly do we protect against this, the articles say of a MS update, my update history only shows updates this year? I have no updates that need to be installed at the moment, so do I assume I have the update? And is there some tool that will tell you if you are infected?

Jonathan

vista?  the security rollouts are different from kernel to kernel.....vista, 7, and 2008 are all using a similar kernel which needs a patch.  XP, 2000, 2003 all use another update.  your old updates may be gone due to a service pack update, but i'd physically search your hard drive for the $NTUninstallation folder for the appropriate patch to ensure it was done. 

download March 09 Malicious software removal tool and malwarebytes.  also, disable autorun feature in the registry (there's a tech bulletin on how to accomplish this). 


bdtools.net had a removal tool for Conflicker, but i tried to download it today and caught the PAK Generic.001......so looks like someone hacked the domain to infect the only existing tool to remove this beast.