JTF.ORG Forum
General Category => General Discussion => Topic started by: Americanhero1 on March 28, 2009, 09:44:34 PM
-
Computer expert Ken Colburn tells you how to find out if your computer is infected with the computer worm Conficker C.
http://www.cnn.com/video/#/video/tech/2009/03/28/dcl.data.doc.computer.worm.cnn
-
I just got a brand new hard drive so I hope that my computer's not infected!
-
I did that
-
Scare tactics, stop worrying people.
Conficker C 2009-02-20
* NetBIOS
o Exploits MS08-067 vulnerability in Server service[8]
o Dictionary attack on ADMIN$ shares
* Removable media
o Creates DLL-based AutoRun trojan on attached removable drives
* HTTP pull
o Downloads daily from any of 250 pseudorandom domains over 8 TLDs[9]
* NetBIOS push
o Patches MS08-067 to open reinfection backdoor in Server service[10]
o Creates named pipe to receive URL from remote host, then downloads from URL
* Blocks DNS lookups
* Disables AutoUpdate
Most ISP's block the port for NETBIOS by default.