You may have heard in the past days of a virus that has many a sysadmin wetting themselves in panic and with good cause. Some say the hackers have yet to activate the payload of the conficker virus which is spreading through low security networks, memory sticks, and PCs without current security updates.
Some 9.5 million pc's are suspected to be affected and as F-Secure's chief research officer, Mikko Hypponen said:
"Total infections appear to be peaking. That said, a full count is
It is scary thinking about how much control they [a hacker]
But they haven't done that yet, maybe they're scared. That's
Below is information regarding the virus from Avira the free anti virus software site. Microsoft has done a good job of releasing a patch to home computers that have chosen to accept the automatic update capabiliy of windows, the real problem may be with corporate sysadmins who have yet to instal the appropriate patches. Of course, it is said that as the virus is not fully understood, the patches may not do much good. Let's wait and see. I guess this is a good time to be using a Linux or a mac, huh!?
Virus: Worm/Conficker Date discovered: 14/01/2009 Type: Worm In the wild: Yes Reported Infections: Medium Distribution Potential: Medium Damage Potential: Medium Static file: No File size: ~160.000 Bytes IVDF version: 7.01.01.115 -
General Methods of Aliases: Platforms / OS: Side Files %all shared folders% %number% \%random character string% .vmx%random character string% .dll%random character string% .dll%random character string% .dll%random .dll%random .dll%all shared folders% \autorun.inf This is a non malicious text %paths and filenames of malware copies% ,%random character Registry %random words% \%paths and filenames of malware "%random \ Network IP address Infection process: %number% \%random character string% .vmx Hosts Miscellaneous Internet File patching: Rootkit Method used: File Programming language: The malware Runtime
Posts
0 comments:
Post a Comment