Can you access microsoft, norton or other security websites?

[Heed]

If not, then you may have the conficker worm:

Conficker - Wikipedia, the free encyclopedia

You'll likely be fine now if you use automatic updates in windows (windows specific threat) as the weakness it exploits has been patched. But it is easy to catch -- just be connected to a network, like say, the internet.

I just spent about 45 minutes getting rid of this little fella, so I thought I'd pass along a warning.

Easiest way to tell is if you can't access microsoft, symantec (norton), kaspersky or other security/antivirus sites. It's a clever worm and blocks them, so it makes it harder to find ways/tools to extricate the wiggly devil.

I stomped him good, though.

Oh, the patch page if you haven't been updated to prevent this sucker:

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

 

[Sun Vaporer]

If not, then you may have the conficker worm:

Conficker - Wikipedia, the free encyclopedia

You'll likely be fine now if you use automatic updates in windows (windows specific threat) as the weakness it exploits has been patched. But it is easy to catch -- just be connected to a network, like say, the internet.

I just spent about 45 minutes getting rid of this little fella, so I thought I'd pass along a warning.

Easiest way to tell is if you can't access microsoft, symantec (norton), kaspersky or other security/antivirus sites. It's a clever worm and blocks them, so it makes it harder to find ways/tools to extricate the wiggly devil.

I stomped him good, though.

Oh, the patch page if you haven't been updated to prevent this sucker:

Microsoft Security Bulletin MS08-067 – Critical: Vulnerability in Server Service Could Allow Remote Code Execution (958644)

Heed--thanks for the heads up--I saw that something about a reward of $250,000 from Mircosoft on MSNBC this morning but did not catch what they were talking about--Sun

 

[Heed]

Oh, yeah. I read that too on Slashdot and it didn't even register until you mentioned it now -- it's the same worm:

Slashdot | Microsoft Slaps $250K Bounty On Conficker Worm

 

[Denni]

Thanks for that, I just checked. I'm using ClamWin antivirus which is a lesser known site and I think the update will have caught it.

 

[surbitonPete]

I wish I wasn't so cynical.......I can't help thinking most viruses are probably produced by the very people who are making the 'anti' -virus software.....so it keeps them in business. They might be competing with each other to see if they can produce loads of viruses that nobody else's software can detect, hence making their own software seem to be the best anti-virus on the market.

 

[TropicalBob]

I was unable to reach AVG all day yesterday. Thanks for letting me know why.

Auto update worked later, however.

 

[tribalmasters]

Had repaired a few with this worm, ComboFix can take care of it no problem and removes rootkits and other hard to get rid of junk, run Spybot after Combofix to clean off any junk that ComboFix missed but do beware that if system files get infected and Windows malfunctions afterwards, you may have to reinstall Windows.

 

[tribalmasters]

I was unable to reach AVG all day yesterday. Thanks for letting me know why.

Auto update worked later, however.

The AVG update servers have been playing up alot recently.

 

[aasupplyny]

Two computers at work were infected just last week... We're paranoid, so we just format and rebuild. The thing would let me scan with Avast or reinstall it.

 

[dc2k08]

idiotproof eyechart to see if you have it >

Conficker Eye Chart