Conficker
ATTN: For those in immediate need of assistance:
For those who have the time to toy with there computers and want to save the 35-40 bucks, the information down below will help.
The history of Conficker
This worm is spreading through networks at alarming rates. It's weapon: exploiting vulnerability called MS08-067 in Windows 2000, XP, and Server 2003. Conficker spreads via Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability.
Alternative names for conficker
The Conficker Virus
Once this virus infects a computer it does a number of things including:
- Extracts all of its files to the %System% directory with random DLL file names, which can wreak havoc on your computer.
- Deletes the user's Restore Points.
- Registers a services called Netsvcs
- Creates scheduled tasks that execute all of the DLL files.
- Creates it's own simple HTTP server on the infected computer and spreads the worm to other computers in the network through file shares.
- Creates an Autorun.inf file in file shares to execute the warm files once the share is accessed by another computer.
- Connects to external sites to download additional files.
Removing Conficker
If you are looking for professional help, please consult with a computer networking and storage professional.
If you are an IT professional, here is a quick tip:
- Visit http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
- Follow a series of steps in order to update your computer, and remove the virus.