Conficker breakthrough - Malware leaves a 'fingerprint' on infected machines

jmke · 30th March 2009, 19:38

Charles send us an extremely interesting mail today regarding the Conflicker Worm set to go off April 1st.

---------

Busted! Conficker's tell-tale heart uncovered

“Security experts have made a breakthrough in their five-month battle against the Conficker worm, with the discovery that the malware leaves a fingerprint on infected machines which is easy to detect using a variety of off-the-shelf network scanners.”

"We have no idea what Conficker is going to do on April 1," Kaminsky said. "Certainly there is no reason anyone wants to find out on their network. My recommendation is that people run one of the vulnerability scanners on Monday or Tuesday."

http://www.theregister.co.uk/2009/03...ure_discovery/

Background Material

Tools to remove Conficker
http://www.symantec.com/business/sec...011316-0247-99
http://www.f-secure.com/v-descs/worm...nadup_al.shtml
http://www.bdtools.net/

Conficker Q&A
http://www.f-secure.com/weblog/archives/00001636.html

Analysis of Conficker C
http://mtc.sri.com/Conficker/addendumC/
http://en.wikipedia.org/wiki/Conficker

How to disable the ‘Autorun’ functionality in Windows
http://support.microsoft.com/kb/967715

31st March 2009, 00:12

This is great news! I do computer work for New Orleans Parish School and everyone has been panicking about conflicker.c

jmke · 31st March 2009, 07:35

30th March 2009, 19:38	#1
jmke Madshrimp Join Date: May 2002 Location: 7090/Belgium Posts: 79,021	Conficker breakthrough - Malware leaves a 'fingerprint' on infected machines Charles send us an extremely interesting mail today regarding the Conflicker Worm set to go off April 1st. --------- Busted! Conficker's tell-tale heart uncovered “Security experts have made a breakthrough in their five-month battle against the Conficker worm, with the discovery that the malware leaves a fingerprint on infected machines which is easy to detect using a variety of off-the-shelf network scanners.” "We have no idea what Conficker is going to do on April 1," Kaminsky said. "Certainly there is no reason anyone wants to find out on their network. My recommendation is that people run one of the vulnerability scanners on Monday or Tuesday." http://www.theregister.co.uk/2009/03...ure_discovery/ Background Material Tools to remove Conficker http://www.symantec.com/business/sec...011316-0247-99 http://www.f-secure.com/v-descs/worm...nadup_al.shtml http://www.bdtools.net/ Conficker Q&A http://www.f-secure.com/weblog/archives/00001636.html Analysis of Conficker C http://mtc.sri.com/Conficker/addendumC/ http://en.wikipedia.org/wiki/Conficker How to disable the ‘Autorun’ functionality in Windows http://support.microsoft.com/kb/967715 __________________

31st March 2009, 07:35	#3
jmke Madshrimp Join Date: May 2002 Location: 7090/Belgium Posts: 79,021	tool downloadable here: http://www.doxpara.com/?p=1291 __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
9 Steps to Purge Your PC of Malware	jmke	WebNews	0	15th July 2010 16:39
Malware vs Virus Scanners: 12 passed, 13 failed	jmke	WebNews	8	5th September 2009 16:27
Is your PC Infected with Conficker? Check this Eye Chart	jmke	WebNews	0	3rd April 2009 07:58
Conficker Worm Strike Reports Start Rolling In	jmke	WebNews	2	1st April 2009 17:59
Conficker worm spikes, infects 1.1 million PCs in less than 24 hours	jmke	WebNews	0	16th January 2009 22:15
Giving your passwords the finger: a review of fingerprint scanners	jmke	WebNews	0	25th June 2007 10:01
Convert Physical Machines to Virtual Machines for Free	jmke	WebNews	0	31st January 2007 14:59
Bringing Malware to a new level - SpamThru Trojan Analysis	jmke	WebNews	0	25th October 2006 14:20
Microsoft Optical Desktop with Fingerprint Reader	Sidney	WebNews	0	5th August 2005 22:42

31st March 2009, 00:12	#2
cowzzwoc Posts: n/a	This is great news! I do computer work for New Orleans Parish School and everyone has been panicking about conflicker.c