Third Conficker Worm Wields: Most Resilient Yet

• by Bill Lindner on 20090311 @ 10:32PM EST | google it | send to friends
• Filed under Security | (related terms: infected, antivirus, variant, symantec, conficker/downadup worm)

The frightening Conficker worm is just getting bigger and meaner all the time. W32.Downadup.C, a third variant of the Conficker/Downadup worm, is reportedly being pushed out to systems that are already infected.

Analysis of the third variant of the worm by Symantec is still in the early stages, but their initial research found a couple of new attributes -- one of which includes targeting antivirus software and security tools with the intention of disabling them. (Source: symantec.com)

New Variant Protects itself from AntiVirus Software

The Conficker/Downadup authors moved from a 250-a-day domain-generation algorithm to a new 50,000-a-day domain-generation algorithm in response to the security industry's success in cracking the W32.Downadup.B domain-generation algorithm. (Source: symantec.com)

Symantec is not seeing an increase in customer infections for this threat but they are keeping a close eye on it.

Earlier versions of the conficker/downadup worm attempted to disable antivirus software but the newest variant is designed to provide more protective actions to infected PCs so it can better defend itself from antivirus software and other methods of remediation.

A Modular Component For Currently Infected PCs

Vincent Weafer, Vice president of Symantec Security Response, says that W32.Downadup.C is a more aggressive modular component for machines currently infected with the Conficker/Downadup worm.  The new version does not attempt to self-replicate and appears to behave more like a Trojan than a worm, noting that it's more robust in defending itself. (Source: pcworld.com)

A list of processes found on infected machines that contain an antivirus program or security analysis tool that are killed can be found at Symantec's forum. (Source: symantec.com)

Visit Bill's Links and More for more great tips, just like this one!

Free guide: Windows 8 Cheat Sheet: Keyboard Shortcuts. Microsoft Windows has always had some fantastic time-saving keyboard shortcuts designed to make our lives easier. For example: CTRL-X will cut text or objects, and CTRL-V will paste them. (Of course, you can use your mouse to achieve the same thing, but it requires clicking and fumbling through menus, which can be a huge time waster if you cut and paste 50+ times a day). With Windows 8, Microsoft has added many new keyboard shortcuts to their operating system; unfortunately, it's a bit of a learning curve. That's where the Windows 8 keyboard shortcuts cheat sheet comes in! Simply download the guide and reference it when you need to. You'll save a ton of time using your keyboard, rather than reaching for the mouse and flipping through oodles of menus trying to find what you're looking for. Share and enjoy! Click here to download this guide now! Note: this guide is free, but registration is required; after that, you can select more ebooks and videos for download without registering again. If you have questions / problems with the registration form, please read this.