Win32/Conficker exploits Windows vulnerability

Win32/Conficker is a new worm out there ,which seems to be a headache for Windows users these days.It seems to exploit a vulnerability in the system which has been addressed in  MS08-067, a Microsoft security update.

”   It opens a random port between port 1024 and 10000 and acts like a Web server. It propagates to random computers on the network by exploiting MS08-067. Once the remote computer is exploited, that computer will download a copy of the worm via HTTP using the random port opened by the worm. The worm often uses a .JPG extension when copied over and then it is saved to the local system folder as a random named dll,….It is also interesting to note that the worm patches the vulnerable API in memory so the machine will not be vulnerable anymore. It is not that the malware authors care so much about the computer as they want to make sure that other malware will not take it over too, ….  ” : Microsoft

Additional readings :

• New Virus Detected – Win32/Conficker.A worm
• Indian Computer Emergency Response Team .
• Solution: External Drive – Autorun Trojan Virus .

Avira security

Worm/Conficker

• Summary
• Full description
• Statistics

Ad :

This post has been viewed over 1000 times around the globe. To place your text ads / simple banners here ,mail me at : micman.manoj at gmail.com