The virus, Conficker, the one all the hype is about...
Posted: Wed Apr 01, 2009 1:38 pm
Hey all, I work in IT, and even though the hype about this virus that is supposed to go live on the 1st f April may just be exactly that, hype, it is worth being secure.
Download all your updates and get a decent Antivirus/Antispyware software (IMO the free ones are relatively junk, though people still swear by AVG free). Don't fool for the "get as many different protections as you can" approach, you will turn your computer into a dog and likely end up not as secure.
Next make sure you download the excellent Malware Bytes: Anti Malware from http://www.malwarebytes.org/mbam.php , it is by far the best single piece of cleanup software you should have (this will pick up items that even Eset/NOD/Norton etc products won't see).
Ensure you update it before running (as it is free, there is no scheduled cleanup or auto downloads). I would suggest buying the full version of this software, it is fast becoming an industry standard.
Lastly, a couple of websites that detail this (not so) new "threat"
http://blog.cleveland.com/business/2009 ... n_you.html
http://www.dshield.org/diary.html?storyid=5860
Don't get caught with your pants down, this certainly does have the potential to ruin your computing life...
My suggested software for general home PC security is the following:
Norton 360 (my personal favourite)
Malwarebytes Anti Malware
Ccleaner from http://www.ccleaner.com/
Autoruns from http://technet.microsoft.com/en-us/sysi ... 63902.aspx
HijackThis from http://majorgeeks.com/download3155.html
Latest version of Java runtime (very important for general internet security, if anyone has come up against the vUndo virus, you will know exactly what I mean) from http://java.com/en/download/index.jsp
DON'T FORGET THOSE WINDOWS UPDATES!!!
Download all your updates and get a decent Antivirus/Antispyware software (IMO the free ones are relatively junk, though people still swear by AVG free). Don't fool for the "get as many different protections as you can" approach, you will turn your computer into a dog and likely end up not as secure.
Next make sure you download the excellent Malware Bytes: Anti Malware from http://www.malwarebytes.org/mbam.php , it is by far the best single piece of cleanup software you should have (this will pick up items that even Eset/NOD/Norton etc products won't see).
Ensure you update it before running (as it is free, there is no scheduled cleanup or auto downloads). I would suggest buying the full version of this software, it is fast becoming an industry standard.
Lastly, a couple of websites that detail this (not so) new "threat"
http://blog.cleveland.com/business/2009 ... n_you.html
http://www.dshield.org/diary.html?storyid=5860
Don't get caught with your pants down, this certainly does have the potential to ruin your computing life...
My suggested software for general home PC security is the following:
Norton 360 (my personal favourite)
Malwarebytes Anti Malware
Ccleaner from http://www.ccleaner.com/
Autoruns from http://technet.microsoft.com/en-us/sysi ... 63902.aspx
HijackThis from http://majorgeeks.com/download3155.html
Latest version of Java runtime (very important for general internet security, if anyone has come up against the vUndo virus, you will know exactly what I mean) from http://java.com/en/download/index.jsp
DON'T FORGET THOSE WINDOWS UPDATES!!!
IF THIS IS USEFUL TO PEOPLE, MAYBE IT COULD BE STICKIED...In closing, I will post a guide for cleaning up a PC. I do this once a month whether I have an infection or not. This part get's pretty involved, and is complex in stages. Don't do any of ths if you aren't confident. I will accept no responsibility for damage or loss of data. Do this at your own risk.
Firstly, download the tools linked above
Next, get your computer into Safe Mode:
After your computer boots past the first splash screen, mash the "F8" key until you are presented with...
Select "Safe Mode"
Once in Windows, be sure to disable "Syetem Restore"
Right click "My Computer", select "Properties" then select the "System Restore" tab
Select the "Turn off System Restore" check box indicated above
Next up, install CCleaner and start it up
Select the "Cleaner" tab as indicated, then click "Run Cleaner"
Next select the "Registry" tab, click "Scan for Issues". Once that is done, click "Fix selected issues", follow all prompts to backup your registry.
Next, select the "Tools" tab, here you have "Uninstall" and "Startup" options. Remove programs that shouldn't be there using "Uninstall" (Smiley Central or similar are spyware, there are many that shouldn't be there). Disable programs from starting up on the "Startup" tab. Virus' and Spyware place entries in here, disable or delete their entries.
Next up, install HijackThis
Unzip the files to the desktop for ease of location: Start unzip process
Unzip the files to the desktop for ease of location: Select desktop
Unzip the files to the desktop for ease of location: Finally, unzip
Heed this next warning, you CAN do damage to your PC, but this tool is extremely powerful for stopping popups and browser redirects
Run the program, select "Do a system scan only", if you don't know what you are doing, use the option with a log file. That can be posted here and I can help decipher the entries (or anyone else with this sort of experience).
The next screen is everything your computer loads at boot, and at other times. This is complex, but ticking a checkbox on the left side, then selecting "fix selected" will remove them PERMANENTLY! You have another chance to save a log here too.
Here is your last warning before deleting the items you selected.
Next up, install Autoruns, then run the AutorunsSC program
Select the "Logon" tab, here is everything that your computer loads at log in time. This is the same as with CCleaner, but this is a little more in depth.
This entire guide so far has been preperatin for actual Virus removal...
Next up, install MalwareBytes Anti Malware
Run the program
Ensure you select to update the program and run immediately
Select the "Scanner" tab, click "Perform full scan"
Full scans are important if you know you are infected, or if it's the first time you have used this to scan. For preventative maintenance, just use the "Perform quick scan" option. Any other times you use the program, make sure you update it first.
Follow the prompts, you will be told if there are any infections and the rest of the options are very self explanatory.
Post questions here. I will help where I can. I can also attempt to help remotely (though if you are infected, this probably won't be possible).
Lastly, reboot the PC into normal mode and re-enable System Restore.
You lost me at "hey all" 
