The Confricker Worm now attacks (and most likely infects):
- Shared Computers with weak passwords (home users in workgroups)
- Computers without the latest security updates. Go here to download all your critical Microsoft patches!
- USB sticks and external hard drives
- Computers with open shares (common in corporate networks)
- Computers with weak passwords….ouch. Confricker is actually hacking weak passwords. Once it does I’m assuming it jumps onto a share or admin share (like c$).
To prevent your computers at home or on a corporate network from becoming infected please download and install:
http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
To remove this worm you can run the latest Malicious Software Removal Tool (MSRT)
Confricker is detected as:
Win32/Conficker.A (CA) W32.Downadup.B (Symantec) Mal/Conficker-A (Sophos) Trojan.Win32.Agent.bccs (Kaspersky)
Description Per Microsoft:
Worm:Win32/Conficker.B is a worm that infects other computers across a network by exploiting a vulnerability in the Windows Server service (SVCHOST.EXE). If the vulnerability is successfully exploited, it could allow remote code execution when file sharing is enabled. It may also spread via removable drives and weak administrator passwords. It disables several important system services and security products.
