Running on UbuntuLinux and Mac, I don't expect to encounter the Conficker worm anytime soon. Here's a straightforward explanation of what it does:
...disables systems such as the Windows Automatic Update, Windows Security Center, Windows Defender and Windows Error Reporting. . .also gathers personal information and installs malware into the infected computer. [and]... attaches to several windows processes including svchost.exe, explorer.exe and services.exe....Other symptoms include modifications to DNS and TCP/IP configuration. Conficker will also open lots of un-authorized ports in your Firewall, so a good way to check is to have a gander at your ‘Wall and see if there are ports open that shouldn’t be.However, I thought I'd take a look just in case because of this note:
Because computers can appear to function normally when infected, Microsoft advises you to run this tool even if your computer seems to be fine. You should also use up-to-date antivirus software to help protect your computer from other malicious software.Protect your Windows PC by getting a patch appropriate for your operating system (e.g. XP, Vista).
Tools to Remove the Worm:
- W32.Downadup Removal Tool, from Symantec.
- Worm:W32/Downadup.AL Removal Tool, from F-Secure.
- Downadup Removal Tool, from BitDefender.
Subscribe to Around the Corner-MGuhlin.org
Be sure to visit the ShareMore! Wiki.
Everything posted on Miguel Guhlin's blogs/wikis are his personal opinion and do not necessarily represent the views of his employer(s) or its clients. Read Full Disclosure