Sunday, April 26, 2009

Article Review: The Conficker Worm: A Potential Threat to PCs




While the frequency of computers getting infected from malware has decreased over the years, thanks to swift and organized responses from security response companies such as Symantec, VeriSign and Microsoft, some still pass through the cracks and pose huge threats to millions of computers worldwide. The latest of these malware comes in the form of an infectious worm which attacks a Windows Server Service flaw(MS08-067). This worm has been named the Conficker worm, aka Downadup, and has infected millions of computers worldwide, from French navy systems to British Hospitals, in the last year or so. The worm was intended to quietly make money by sending spam and stealing financial data or sensitive documents from infected computers. It was initially spread in its first stage where it enters the computer and targets the MS 08-067 flaw in the Windows Server Service, a flaw that attackers could target remotely, making it a large target for worms. Then updates to the worm would spread and take swipes at debilitating security programs such as Symantec or Microsoft Update. Then it would eventually gain access and steal passwords and data. However, its massive infection rate drew heavy attention from security response developers which may have halted the plans of the perpetrators of this Conficker worm. Currently, the worm is stuck in the second stage where it is not yet able to steal data and passwords and it is crucial for computers infected with this virus to download the appropriate anti-virus software.


To determine if your PC has been infected with the Conficker worm, you should try accessing anti-virus security websites, such as f-secure.com, kaspersky.com, symantec.com and others. If your computer is infected, you will not be able to gain access to these web sites. If this is the case, it is recommended that you download, from a separate computer, a Conficker removal tool and then run it on the infected computer to remove the worm, otherwise, should the authors of the Conficker worm proceed to find a payload for the worm, then it might steal personal data and you might get hit financially!
Larkin, Erik (May 2009). The Conficker Worm: A Potential Threat to PCs. PCWorld, 37-38

1 comment:

  1. Great Article! I heard about this worm but was lucky enough not to get it on my computer! One thing i thought about was, what if the security software companies themselves release these bugs to encourage people to buy their products? Sounds sad but potentially true.

    ReplyDelete