[ISN] Conficker: The Windows Worm That Won't Go Away

From: InfoSec News <alerts_at_private>
Date: Thu, 26 Mar 2009 00:32:03 -0600 (CST)
http://www.eweek.com/c/a/Security/Conficker-The-Windows-Worm-That-Wont-Go-Away-529249/

By Brian Prince
eWEEK.com
2009-03-25 

The Conficker worm continues to slither its way across the Internet, and 
a major update for the malware is looming on April 1. Just what will 
happen is anyone's guess, security researchers say, but there are 
malware removal tools and protections out there for users.

Much has been written about the Conficker worm's next big day. On April 
1, the worm is expected to evolve yet again, when it blasts out requests 
to 500 of the 50,000 domains it generates daily in search of an update.

Just what that update will do isn't known; what is known is that 
Conficker —aka Downadup—has proven to be an impressive piece of malware 
as such things go. Version C, the latest iteration of the Conficker 
worm, added peer-to-peer communication between infected systems and a 
new domain-generation algorithm.

The worm also got a new set of armor to protect itself that enabled it 
to kill some DNS (Domain Name System) lookups and disable AutoUpdate and 
some anti-virus software. Fortunately, there are ways for anyone who 
gets infected to manually remove the latest version, and there are also 
removal tools available from Symantec and others to help users clean 
their systems.

[...]


_______________________________________________      
Best Selling Security Books and More!
http://www.shopinfosecnews.org/
Received on Wed Mar 25 2009 - 23:32:03 PDT

This archive was generated by hypermail 2.2.0 : Wed Mar 25 2009 - 23:40:19 PDT