Monday, March 30, 2009

Conficker worm removal tool

You've heard about the Conficker attack, which may spread through the Intenet on April Fool's Day. Here's an informative article by Elinor Mills on CNET.

The article assesses the possible damage, scope, and includes a link to the Microsoft patch to prevent vulnerability and a Conficker removal tool, if the worm does attack your computer.

Conficker.C, which surfaced earlier this month, shuts down security services, blocks computers from connecting to security Web sites, and downloads a Trojan. It also reaches out to other infected computers via peer-to-peer networking and includes a list of 50,000 different domains, of which 500 will be contacted by the infected computer on April 1 to receive updated copies or other malware or instructions.


The question is... If the worm is a result of a Microsoft vulnerability, and Conficker hasn't yet struck, how could Microsoft create a removal tool?

Just a thought...

No comments: