[34] It should be noted that this patch was released prior to the creation and release of the Conficker worm.
Removal tools are available from Microsoft,[35] BitDefender,[36] Enigma Software,[37] ESET,[38] F-Secure,[39] Symantec,[40] Sophos,[41] and Kaspersky Lab,[42] while McAfee and AVG can remove it with an on-demand scan.[43][44]
While Microsoft has released patches for the later Windows XP Service Packs 2 and 3 and Windows 2000 SP4 and Vista, it has not released any patch for Windows XP Service Pack 1 or earlier versions (excluding Windows 2000 SP4), as the support period for these service packs has expired.
Since the virus can spread via USB drives that trigger AutoRun, disabling the AutoRun feature for external media (through modifying the Windows Registry) is recommended.[45]
However the United States Computer Emergency Readiness Team describes Microsoft’s guidelines on disabling Autorun as being “not fully effective,” and they provide their own guides.[46]
Microsoft has released a removal guide for the worm via the Microsoft website.[47]
According to AsiaOne News:
A GOVERNMENT information security watchdog has issued a warning for people to take precautions against a fast-mutating malicious computer program, which is poised to strike tomorrow.
In a bulletin sent out yesterday, the Singapore Computer Emergency Response Team (SingCert) warned that the latest variant of the Conficker worm, known as Conficker.C, may ‘become active on April 1′
Read the full article at AsiaOne News:
Conficker, also known as Downup, Downadup and Kido, is a computer worm that surfaced in October 2008 and targets the Microsoft Windows operating system.
The worm exploits a previously patched vulnerability in the Windows Server service used by Windows 2000, Windows XP, Windows Vista, Windows Server 2003, Windows Server 2008, Windows 7 Beta, and Windows Server 2008 R2 Beta.
The worm has been unusually difficult for network operators and law enforcement to counter because of its combined use of advanced malware techniques.
Microsoft warns about this virus and advice people to “protect yourself” by disabling the “auto play feature but it’s not fool proof.
According to wikipedia on the removal of the virus
On October 15, 2008, Microsoft released a patch (MS08-067) to fix the vulnerability.




RSS




