McAfee AVERT Stinger Conficker 10.0.1.534

Iria · Mar 28, 2009, 05:08 PM

In the run up to April 1st, McAfee is offering a special build of its stand-alone cleaning tool christened Stinger which will be updated on a daily basis to include any undetected Conficker variants from the wild.

Please ensure that your copy of Microsoft Windows is patched and security software is fully up to date to ensure that April 1st 2009, is a day like any other day!

W32/Conficker.worm attacks port 445, Microsoft Directory Service, exploitin g MS08 - 067 . MS08 - 067 is an exploit similar to MS06 - 040 , which we first saw a couple of years ago .

W32/Conficker .worm attack symptoms:
- Blocks access to security - related sites
- User lockouts
- Trafic on port 445 on non - Directory Service (DS) servers
- No access to admin shares
- Autorun.inf files in recycled directory
_____________
Source / Download: Majorgeeks
Freeware

swimtech · Mar 30, 2009, 08:17 PM

Thanks for this Iria - could help a lot of people...

Turns out, I hadn't seen your news post about this two days ago, but I had brought up that I had read a Stinger was available (I had read/scanned it somewhere and it stuck...) and that it was able to deal with Conficker.

Well, the latest full version of Stinger from McAfee dated Jan. 2009 doesn't take care of it, so I Google searched and found the special Stinger version was available at the MajorGeeks site. I pointed my bosses and a couple others responsible for such for the University here to it at MajorGeeks, and noticed your news post is the number 5 Google search result at the moment - cool.

Erroneus · Mar 30, 2009, 08:56 PM

Another great tool, specially for network administrators are Remove Downadup - Removal tool for Downadup (known also as Conficker or Kido)

Also the detection plugin for Nessus is really great, can detecs conficker in seconds on a network: Tenable Network Security

Also check out doxpara.com , great stuff

Mar 28, 2009, 05:08 PM	#1
Iria DriverHeaven Extreme Member Join Date: Apr 2004 Posts: 7,275 Rep Power: 89	McAfee AVERT Stinger Conficker 10.0.1.534 In the run up to April 1st, McAfee is offering a special build of its stand-alone cleaning tool christened Stinger which will be updated on a daily basis to include any undetected Conficker variants from the wild. Please ensure that your copy of Microsoft Windows is patched and security software is fully up to date to ensure that April 1st 2009, is a day like any other day! W32/Conficker.worm attacks port 445, Microsoft Directory Service, exploitin g MS08 - 067 . MS08 - 067 is an exploit similar to MS06 - 040 , which we first saw a couple of years ago . W32/Conficker .worm attack symptoms: - Blocks access to security - related sites - User lockouts - Trafic on port 445 on non - Directory Service (DS) servers - No access to admin shares - Autorun.inf files in recycled directory _____________ Source / Download: Majorgeeks Freeware

Mar 30, 2009, 08:17 PM	#2
swimtech HardwareHeaven Extreme Member Join Date: May 2002 Location: North Carolina Posts: 4,040 Rep Power: 124 System Specs	Re: McAfee AVERT Stinger Conficker 10.0.1.534 Thanks for this Iria - could help a lot of people... Turns out, I hadn't seen your news post about this two days ago, but I had brought up that I had read a Stinger was available (I had read/scanned it somewhere and it stuck...) and that it was able to deal with Conficker. Well, the latest full version of Stinger from McAfee dated Jan. 2009 doesn't take care of it, so I Google searched and found the special Stinger version was available at the MajorGeeks site. I pointed my bosses and a couple others responsible for such for the University here to it at MajorGeeks, and noticed your news post is the number 5 Google search result at the moment - cool. __________________ It's not so much getting your way that matters or not - what matters is how you go about getting it.

Mar 30, 2009, 08:56 PM	#3
Erroneus Get off my lawn! Join Date: Aug 2002 Location: Denmark Posts: 13,419 Rep Power: 119 System Specs	Re: McAfee AVERT Stinger Conficker 10.0.1.534 Another great tool, specially for network administrators are Remove Downadup - Removal tool for Downadup (known also as Conficker or Kido) Also the detection plugin for Nessus is really great, can detecs conficker in seconds on a network: Tenable Network Security Also check out doxpara.com , great stuff __________________ Last edited by Erroneus; Mar 30, 2009 at 09:05 PM.