[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
The Confiker Virus.
- Subject: The Confiker Virus.
- From: joesox at gmail.com (JoeSox)
- Date: Tue, 31 Mar 2009 06:41:17 -0700
- In-reply-to: <D6D86095D06248CBA70DA3B2887ADB3E@ERICDESKTOP>
- References: <[email protected]> <002f01c9b0cb$0b0f6de0$0101a8c0@E520> <000001c9b0cc$c6126100$52372300$@com> <[email protected]> <[email protected]> <[email protected]> <D6D86095D06248CBA70DA3B2887ADB3E@ERICDESKTOP>
I am uncertain also. I scan a subnet on my network with Axence
NetTools looking for 445 port and I receive some hits. I perform a
netstat -a some of those results but don't really see any 445
activity. The SCS script doesn't find anything either. The PCs are
patched and virusscan updated. One PC when I connected to it did not
navigate to Windowsupdate website. I scheduled a Full McAfee scan as
their documentation suggests
(http://download.nai.com/products/mcafee-avert/documents/combating_w32_conficker_worm.pdf),
and sometime through the scan I was able to reach windowsupdate. I
don't know if it was a coincidence or not that I was not able to reach
the website. I haven't looked into the registry and any other places
for evidence of conficker. I will probably today but I am afraid it
maybe a waste of time since they are already patched and updated.
--
Joe
On Tue, Mar 31, 2009 at 5:48 AM, Eric Tykwinski <eric-list at truenet.com> wrote:
> Joe,
>
> Here's the link for the Python Crypto toolkit:
> http://www.amk.ca/python/code/crypto.html
>
> I scanned our internal network and didn't find anything, so I can't really
> vouch for it's reliablity though.