Search for 'Conficker' Could Lure Virus

[angelfire]

Search for 'Conficker' Could Lure Virus

Carrie-Ann Skinner, PC Advisor
Mar 28, 2009 2:50 pm


Symantec is warning Web users that searching for information on computer viruses such as Conficker could put them at risk of unintentionally downloading the virus on to their PC.

Conficker targets a flaw in Windows Server and despite Microsoft releasing an emergency patch and urging all Web users to download it, many machines remain unprotected.

According to the security vendor, searching for 'conficker' in a number of the Web's most popular search engines brings up a number of hoax Websites that actually host the virus and infect any users that navigate to the site.

Symantec warns Web users the best course of action is to use software that will block Web pages such as these from being visited.

"Be careful with the links you follow. A sincere effort of keeping abreast with the latest security information might contain some unwelcome surprises," the security firm added.

A third version of the virus was also discovered this month and security researchers believe it may cause problems on April Fools Day.

"It's set to go off April 1, 2009 and Conficker will generate 50,000 URLS daily," said Computer Associates director of threat research, Don DeBolt.

http://www.pcworld.com/article/162149/search_for_conficker_could_lure_virus.html

[gia66]

Thanks for the post Angel

[tomron]

That's a good heads up angelfire

Here's some additional info regarding Conficker.

http://isc.sans.org/diary.html?n&storyid=6091

[tomron]

A possible prevention for Conficker.

In this LINK it mentions XP and to use gpedit.msc for group policy,but XP home doesn't have group policy.

In this LINK is a work around.

Not sure,but Vista,or certain versions may have group policy.

[tomron]

Here's two links with info and tools regarding Conficker.

Centralized Information About The Conficker Worm

The following list are the sanctioned repair and detection tools that are supported and given out by the appropriate and direct vendors of tools. Note that if you cannot get to one or more of these, you might be infected with conficker or any of the other many malicious programs out there. Try another, at the time of this writing, not all of these are blocked by conficker and any of them will work.

[Jewels]

McAfee has a stinger version to handle conficker

[tomron]

Here's some other programs also.

http://isc.sans.org/diary.html?n&storyid=5860

[justy]

thanks for all the links everyone

[tomron]

Here's the MS patch to avoid Conficker.

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx