More Conflicker Scare Tactics!!!

April 1 2009

The US-CERT has a provided a tool to assist with the identification of computers infected with Conficker. The tool is available for download at the following URLs. The last link is the installation instructions.



ftp://disftp.state.ar.us/pub/NT/AntiVirus/ConfickerSnitcher/domains.conf

ftp://disftp.state.ar.us/pub/NT/AntiVirus/ConfickerSnitcher/install.vbs

ftp://disftp.state.ar.us/pub/NT/AntiVirus/ConfickerSnitcher/setup.conf

ftp://disftp.state.ar.us/pub/NT/AntiVirus/ConfickerSnitcher/ConfickerSnitcherv29.doc



The SANS Institute has also released a list of vendors which have publicly available tools and instructions for Conficker removal. You can access this list by using the following link:


http://isc.sans.org/diary.html?storyid=5860



The Conficker worm is set to do something on April 1, so please take advantage of the identification and removal information before the Wednesday. The extent of the impact of the Conficker worm is unknown, but there are information and tools to help you learn more about it and be prepared now.