For windows xp - http://www.microsoft.com/downloads/d...displaylang=en

Estimates are 9m infections but it hasnt been activated yet.

 

I read about this .........anything for Vista

Shaun

 

Run windows update and forget about it. Fixed since last year.

 

probabily the only people getting hit by this are the ones running a dodgy copy who can't update.

 

Not strictly true. Corporates can have slow update policies and extensively test patches before releasing them into the infrastructure. Then there are those corporates who have no IT policy and get caught with their pants down like this....

This patch was released on October 23rd so there really is no excuse.

Sheffield City NHS management should be shot for turning off ALL updates because one pc had an issue with automatic reboots.

 

So true, company I work for has only just (past few months) done a roll out to update xp pro to service pack 2 - this was after sp3 had been released, and its quite a big company I work for as well

 

The first tests we did with SP3 hosed XP, so I don't blame them for being slow.

Yesterday we've run into a XP SP3 compatability issue (or so one of the two software vendor is claiming...)

 

If you go into Add/Remove Programs in the Control Panel, tick the box that says 'Show Updates' there's a list of Windows patches at the bottom - easier than dicking around in the registry.

 

The antivirus companies will be rubbing their hands together as will the ISP's who are allowing this particular piece of code to register the hundreds of domains and hosting packages daily, who's paying and will the card owners be traced and for a refund. Why are the domains continuing to be registered? Would you take steps to stop this lucrative revenue stream?

The efforts of the antivirus companies and ISP's will be minimal I can assure you.

 

Patches for all OS's

http://www.microsoft.com/technet/sec.../MS08-067.mspx

 

F-Secures log of originating IP's supports my "dodgy install" theory:

How Big is Downadup? Very Big. - F-Secure Weblog : News from the Lab

 

had some trouble logging into the works CCTV pc from last friday, had a look at it just now and found this downadup thing while doing a safe mode virus scan

avg free 8.0 has found various things and put them in the virus vault, including 2 worms while i was logging into the router via my laptop (flashed on screen)

so i booted it into safe mode and started a full check, thing is the works machine, although only used for the CCTV program, also runs a http server so i can login from home. i found that leaving auto updates switched on was allowing the staff to click the title bar while the bubble thing was on screen and getting to the desktop quite easy, so switched it all off, do not want them to kill the pc and do sneaky valets for cash while i am not around so it needs to stay "locked"

so far the check has found the suspect ecbxse[1].gif file and is ploughing into the rest of the hard drives.

 

Isn't avg crap?

 

Some people say yes, some people say no, i can only compare it with norton, in that respect its vastly superior!

Cant say i have ever had a real problem with "AVG free" to be honest.

The works cctv machine does nothing except run the CCTV program, dyndns to upload the current IP and a small hhtp server to allow me to login from home, no internet browsing or anything like that, so i am doubtful that paying for some "proper" antivirus program is worth it?


checked the laptop i use at work for browsing, it was clean, also switched auto updates on and found i had 80mb of patches to install

came home and checked the home desktop (took 4 hours to scan in safe mode) and that was clean, need to check the missus`s laptop tomorrow but would assume its going to be fine, suspect i got infected via the cctv machine and that is as far as it got.

 

Always wondered this ?? so even thou there are many folK using dodgy copies off xp etc they cant actually carry out the updates as the software would be instantly recognised as not being genuine - correct ??

pity !! was going to " borrow " a copy for use with the little acer aspire I have here, getting kinda fed up trying to work with linux !!!

 

i always thought windows would let you update major security things even with a dodgy copy?

(not actually speaking from experience as mine are all legit)

 

you can usually buy a broken laptop from fleabay with a genuine key it on for pennies, done this a few times in the past

 

WGA was defeated almost immediately. The only success MS has had has been in acting against any websites who dared to host it. Google: "RemoveWGA".

 

If you go here:

W32/Conficker.worm.gen.a

Read the details about the worm, specifically this bit:

Then go do a WHOIS on that domain:

Trafficconverter.biz - Traffic Converter

The status is 'suspended' but do you think that maybe:
Daniel Adams

of
13 Baterman Street
London
W1D 3AF
UNITED KINGDOM
GB

is in a spot of bother?

and he owns 50 odd other domains.....

 

What gets my goat is the Antivirus companies and ISP's saying they're doing all they can to stop this.. bla, bla, bla. Well why don't the antivirus companies install their product on the ISP's servers, end of problem.

 

They will be on the ISPs Servers, but as our traffic doesn't hit the Servers, it's academic.

All the web traffic is just passing through. If you would like the ISP to provide IDS on all web facing devices, be prepared to pay £1000 per month for your 'net connection and take a HUGE hit on the latency of all connections.

 

You've lost me a little there Keiran

"Attempts to download a malware file from the remote website"

Surely this malware file is being uploaded in order to be downloaded, what's the problem with scanning uploaded files. You can't even put a pair of **** on some servers without it being picked.

Ah, perhaps my use of ISP was a little vague, would 'hosting company' work?