Conficker-C Worm Solution

National Cyber Alert System

Technical Cyber Security Alert TA09-088A archive

Conficker Worm Targets Microsoft Windows Systems

Original release date: March 29, 2009
Last revised: March 30, 2009
Source: US-CERT
Systems Affected - Microsoft Windows

Solution

Instructions, support and more information on how to manually remove a Conficker/Downadup infection from a system have been published by major security vendors.  Please see below for a few of those sites. Each of these vendors offers free tools that can verify the presence of a Conficker/Downadup infection and remove the worm:

Symantec:

http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-011316-0247-99

Microsoft:
http://support.microsoft.com/kb/962007
http://www.microsoft.com/protect/computer/viruses/worms/conficker.mspx

Microsoft PC Safety hotline at 1-866-PCSAFETY, for assistance.

US-CERT encourages users to prevent a Conficker/Downadup infection by ensuring all systems have the MS08-067 patch (seehttp://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx), disabling AutoRun functionality (see http://www.us-cert.gov/cas/techalerts/TA09-020A.html), and maintaining up-to-date anti-virus software.

 

Need More Assistance?
Call 1-800-905-GEEK (4335) Today

Mention Promo Code: APRIL25
and Receive $25.00 Off New Service 

Last-minute Conficker survival guide

Tomorrow -- April 1 -- is D-Day for Conficker, as whatever nasty payload it's packing is currently set to activate. What happens come midnight is a mystery: Will it turn the millions of infected computers into spam-sending zombie robots? Or will it start capturing everything you type -- passwords, credit card numbers, etc. -- and send that information back to its masters?

No one knows, but we'll probably find out soon.

Or not. As Slate notes, Conficker is scheduled to go "live" on April 1, but whoever's controlling it could choose not to wreak havoc but instead do absolutely nothing, waiting for a time when there's less heat. They can do this because the way Conficker is designed is extremely clever: Rather than containing a list of specific, static instructions, Conficker reaches out to the web to receive updated marching orders via a huge list of websites it creates. Conficker.C -- the latest bad boy -- will start checking 50,000 different semi-randomly-generated sites a day looking for instructions, so there's no way to shut down all of them. If just one of those sites goes live with legitimate instructions, Conficker keeps on trucking.

Conficker's a nasty little worm that takes serious efforts to bypass your security defenses, but you aren't without some tools in your arsenal to protect yourself.

Your first step should be the tools you already have: Windows Update, to make sure your computer is fully patched, and your current antivirus software, to make sure anything that slips through the cracks is caught.

But if Conficker's already on your machine, it may bypass certain subsystems and updating Windows and your antivirus at this point may not work. If you are worried about anything being amiss -- try booting into Safe Mode, which Conficker prevents, to check -- you should run a specialized tool to get rid of Conficker.

Microsoft offers a web-based scanner (note that some users have reported it crashed their machines; I had no trouble with it), so you might try one of these downloadable options instead: Symantec's Conficker (aka Downadup) tool, Trend Micro's Cleanup Engine, or Malwarebytes. Conficker may prevent your machine from accessing any of these websites, so you may have to download these tools from a known non-infected computer if you need them. Follow the instructions given on each site to run them successfully. (Also note: None of these tools should harm your computer if you don't have Conficker.)

As a final safety note, all users -- whether they're worried about an infection or know for sure they're clean -- are also wise to make a full data backup today.

What won't work? Turning your PC off tonight and back on on April 2 will not protect you from the worm (sorry to the dozens of people who wrote me asking if this would do the trick). Changing the date on your PC will likely have no helpful effect, either. And yes, Macs are immune this time out. 

Yahoo Tech News -  Tue Mar 31, 2009

A new virus may be set to target computers on April Fool’s Day.

Wired PR News – A new malware threat may prove to be the most destructive one seen in a while. As reported on Yahoo! Tech Buzz, the Conficker C worm is expected to be set to attack on April 1, and has led to the rush of security experts seeking ways to lesson it’s potential impact. As noted in the report, the Conficker was first given widespread attention in January of this year after initially surfacing in the latter part of 2008. It is said to have affected more than nine million computers. The Conficker C is the third version of the malware to be released. Microsoft has reportedly offered a $250,000 reward to those who may have information leading to the worm’s source or writer. Individuals are cautioned to help protect their PCs by taking steps such as updating anti-malware software. 

Call us today to make sure that you have the virus protection you need!

MAKE SURE YOUR COMPUTER IS NOT AT RISK!

Parent's Guide to Internet Safety

The Internet is a valuable tool for education and business. There is, however, an alarming rise in cyber threats, which affect our children.

The Internet is now the primary research tool for a majority of students. Even the most responsible students stumble across web sites that expose them to pornographic content.  Many such sites contain software harmful to your computer, putting all of your family's private data at risk and might possibly even lead to identity theft.

     Beware!
     • 65% children admit to unsafe, inappropriate and/or illegal activity on the Internet.
     • 50% of high school students "talk" in chat rooms or use instant messaging with strangers.
     • 49% have posted personal information on the Internet.
     • 20% have gone to meet face to face with someone they have met on the Internet

Out of concern for our children's safety; Geeks On Call has created the Parents' Guide to Internet Safety, a comprehensive guide to web-safe practices for children and parents. The guide is designed to help children and parents avoid the negative side of the Internet and see the internet as a tool for learning and entertainment. To download your free guide, please click below.Parent's Guide to Internet Safety

Surf Safe!
 
Click Here to Download our Free Parents' Guide to Internet Safety. 

Geeks On Call Commercials

From past to present, we now have most of our commercials online. Check them out below. 

Home & Business
905 Reasons
No More Spam
Hackers?

Old Commercials:
Scream Commercial
First Aid
Game Show
Ad Meeting

Tool #5 - Speed Test

Speedtest.net is a broadband connection analysis tool with a huge selection of geographically dispersed testing servers. Ookla provides this service free to hundreds of thousands of people every day. If you are experiencing slowness with your Internet connection or are simply interested in testing your speed, Speedtest.net is for you.

Basically SpeedTest.net allows you to test your Internet connection speed. It’s great to use when you want to see if your ISP is holding up on their end of the bargain.

Visit Speed Test

Call Geeks On Call today for all of your computer and network needs.
Mention “Blogger2” and receive $20 OFF NEW SERVICE

Tool #4 - Zamzar

Have you ever wanted to convert files without the need to download software ? Zamzar is dedicated to helping you transform your songs, videos, images and documents into different formats.

Visit Zamzar 

Call Geeks On Call today for all of your computer and network needs.
Mention “Blogger2” and receive $20 OFF NEW SERVICE

Tool #3 - Pandora

With Pandora you can explore this vast trove of music to your heart's content. Just drop the name of one of your favorite songs or artists into Pandora and let the Genome Project go. It will quickly scan its entire world of analyzed music, almost a century of popular recordings - new and old, well known and completely obscure - to find songs with interesting musical similarities to your choice. Then sit back and enjoy as it creates a listening experience full of current and soon-to-be favorite songs for you.

You can create as many "stations" as you want. And you can even refine them. If it's not quite right you can tell it so and it will get better for you. 

Visit Pandora

Tool #2 - Twitter

Twitter is a service for friends, family, and co–workers to communicate and stay connected through the exchange of quick, frequent answers to one simple question: What are you doing?

Why? Because even basic updates are meaningful to family members, friends, or colleagues—especially when they’re timely.

• Eating soup? Research shows that moms want to know.
• Running late to a meeting? Your co–workers might find that useful.
• Partying? Your friends may want to join you.

With Twitter, you can stay hyper–connected to your friends and always know what they’re doing. Or, you can stop following them any time. You can even set quiet times on Twitter so you’re not interrupted.

Twitter puts you in control and becomes a modern antidote to information overload.

Click Here To Get Started

Tool #1 - You Send It

For years business professionals have been asking for a solution that would eliminate the frustrations of email attachment limits, the hassles of FTP servers, and the need to use overnight couriers to send large files.

YouSendIt has responded with an answer that fits seamlessly into the busy workflow of every organization. The secure, cost-effective and easy-to-use YouSendIt services are ideal for anyone with the need to send, receive and track digital content. 

Key Benefits:

• Plenty of size - Send files up to 100 MB with a 1 GB monthly download limit.
• Spread the word - Allow up to 100 downloads of every file.
• Address book - Keep track of your friends’ and family’s email addresses in one handy location.
• Files remain available for 7 days - Give your recipients a week to download the files you’ve sent.
• HIPAA Compliant - We are HIPAA compliant. 

Click here for more information

Are Your Local Police on Facebook?

Ever think you’d see the day when you could “tweet” 1 Officer Jones from your cell phone and ask him for the big news in public safety today? Or make “friends” with your local police department on MySpace or Facebook 2? Well, for many citizens across the country, that day has come.

An Iowa newspaper called The Gazette online recently published an article about their local Coralville Police Department’s use of social media to connect with the community, and even to track criminals. The article highlights a recent trend in law enforcement across the country in the use of these sites, from Facebook profiles to Twitter--a “Web site allowing users to broadcast 140-character messages to an unlimited number of people, via computer or hand-held device.”

According to the article, Community Relations Officer Meleah Droll uses Twitter on a regular basis, and “tweeted” a description of a robbery suspect to her “followers,” other members of Twitter who watch her activities, to get more people on the lookout. This tactic opens up entirely new uses for social media in law enforcement.

On a larger scale, the FBI has a Facebook page and a Twitter account, and has added social media to a list of courses in media relations for state and local law enforcement.

This new way of communicating with the public is an easy method of getting information about public safety and may even constitute a global neighborhood watch if enough agencies get involved!

View the article in The Gazette here.

Is your local department connected? Look into whether your local and state law enforcement agency is a member of any social networking sites, such as MySpace, Facebook, Twitter, Flickr 3 or YouTube 4.

Perform a web search using your city’s name and the words “police department” and “social networking,” “social media,” or one of the individual sites such as Twitter or Facebook. People/organizations list through search engines in different ways, so you may need to try several combinations of search terms.

1. A “tweet” (both noun and verb) is a message on Twitter.com, a free Web site used to update others on your status via computer or mobile device.
2. MySpace and Facebook are free social networking sites previously used more by young people to make friends online and share photos, videos, music, and thoughts. Many adults are joining in, as well as businesses and other organizations, which use the sites as a free method of public relations and marketing.
3. Flickr is a free Web site used for sharing photos, and has membership profiles as well, though you can search through photos without signing up, just as you can with content on most social networking sites.
4. YouTube is a free video sharing Web site with tutorials, commercials, speeches, music videos, home videos and more posted.

Geeks On Call is committed to safety, especially children’s safety. Visit www.geeksoncall.com/guide to view our Parents’ Guide to Internet Safety for parent tips and a guide to social networking and commonly used chat/texting terms. Call 1-800-905-GEEK if you have questions or would like to schedule an appointment to set up parental controls or other Internet security measures on your computers.

Web Safe Technology for Babies and Young Children

Kids are getting computer savvy from birth now, it seems. Not only are our young children adopting animals online, but now they can surf the web on their own with new toys that control the sites they visit.

- Many toys for babies and young children are being created to help kids make use of computer technology earlier. You’re probably all familiar with WebKinz, the interactive character site with adoptable plush animals. Now there are keyboards built just for babies and toddlers, such as the Comfy Easy PC Keyboard Learning System, and programs that allow babies and toddlers to touch computer keyboards with fascinating results, seeing that their actions have reactions. Try Baby Keyboard from CNET, available at download.com.

- And Fisher Price has come up with a toy with figurines that plug into a circuit board to take your child straight to a web site featuring the figurine’s character: the Easy Link Internet Launch Pad for toddlers. You can disable the mouse and the keyboard, and your child can only go where the toy permits, though he has control over which site.

- Leap Frog has the ClickStart My First Computer, which will turn the TV into a computer for toddlers. There are many other special keyboards with hardware built just for small children that can connect to your computer by USB.

Keep on the lookout for more fascinating new technology developments for small children. And to ensure your kids' continued safety as they surf the Web younger and younger, download our free Parents' Guide to Internet Safety at www.geeksoncall.com/guide.

Geeks On Call is a leading provider of computer repair and computer service for home and business. Call Us Today: 1-800-905-GEEK

Visit Us Online: www.geeksoncall.com/blogger and http://geeksoncall.wordpress.com/, or check out our videos on YouTube.

Mention “Blogger2″ for $20 Off New Service

Technology to Monitor Your Child's Care

Many sites offer tips for monitoring your children on the Internet, and we have those, too--but what about monitoring your care providers? Technology is good for that, too.

• Many day care establishments are now using web cams, so that you can check on your child at any time during the day from home or work. Ask your day care if they use a web cam. If not, see if they might be willing to, or ask around and find one that does.
  
• Nanny cams are good for in-home day care. Though nannies and babysitters are getting wise to this technology, that’s not necessarily a bad thing. It keeps them on their best behavior, which is what you really want for your child anyway.

Geeks On Call is a leading provider of computer repair and computer service for home and business. Call Us Today: 1-800-905-GEEK

Visit Us Online: www.geeksoncall.com/blogger

Mention “Blogger2″ for $20 Off New Service

2/21/09 - New Virus Alert!

Date Published: 21 Jan 2009
Last Updated: 21 Jan 2009

Type : Trojan
Category : Win32

Also known as: Trojan-Downloader.Win32.Agent.avzz (Kaspersky), Troj/Agent-IJX (Sophos), DowritnBG (CA Anti-Spyware)
Description: Win32/Dowritn.BG is a trojan that downloads and executes binary files.
Method of Infection: Win32/Dowritn.BG usually arrives as an attachment to a spammed email. It may use the attachment name “bank_statement.scr”.

Immediate Protection Info:
CA Antivirus 2007
eTrust Antivirus v7/8*
eTrust EZ Antivirus 7.x
Vet 7

Call Us Today: 1-800-905-GEEK
Visit Us Online: www.geeksoncall.com/blogger

Mention “Blogger2″ for $20 Off New Service

Child Internet Safety Assumptions Debated

The Internet Safety Technical Taskforce, assembled by 49 U.S. State Attorneys, has presented a report that counters the belief that the Web is full of sexual predators trying to solicit children for sex, especially through social networking sites. According to an article on Sci-Tech Today, the task force was made up of "academics, childhood safety experts and executives of 30 companies, including Yahoo, AOL, MySpace and Facebook."

A hot debate has begun about the validity of the report, with claims from Connecticut Attorney General Richard Blumenthal, who helped to create the task force and had been one to push for reforms from MySpace and Facebook, that it belies the many actual cases of child predation.

But according to the Sci Tech Today article, "In what social networks may view as something of an exoneration after years of pressure from law enforcement, the report...said that sites like MySpace and Facebook 'do not appear to have increased the overall risk of solicitation.'"

As quoted on The Hour Online based out of Norwalk, CT, the task force found that "[t]he data...show that in most incidents of Internet-initiated offline encounters between adults and minors, the minor knows that the adult is older..., knows that sex is desired, and believes that she or he can consent to a sexual encounter." According to the article, Blumenthal said, "The report definitely seems to cast the blame on the children who were enticed to engage in contact with the predators. Blaming the victim is appalling and outrageous."

Whatever the outcome of the study, which claims that age-verification software won't be much help in matters of child safety, we at Geeks On Call still feel that education and communication with kids are the keys to their staying safe on the Web. We believe that the more they are aware of these possible encounters and the reality of the people approaching them, the less likely they are to make bad choices--whether they are willing participants or not.

Download our free Parents' Guide to Internet Safety here.

Joining the ranks on MySpace and Facebook

Two new profiles on the web, on MySpace and Facebook--not to mention a bunch of our commercials up on YouTube. We're getting a good amount of hits on them, too. Discounts across the board--mention this site, or that one and get 10% off new service. A little enticement to visit never hurt anyone. It's like serving cookies and lemonade to a guest at your house!

Here's one of our YouTube videos. We're hoping to do a retro thing soon and put some Doug The Geek up there.

Geeks On Call is a leading provider of computer repair and computer service for home and business.

Quick Tips for Parents

Here are a few child Internet safety tips from the techs at Geeks On Call:

- Install a keystroke recorder/generator. Most keystroke generators can screen for certain words as your children browse on the Web and send email alerts when inappropriate language is used by the site or by people in chat rooms and instant messaging (IM).

- Customize your content filter. Your Web browser can be customized to block many kinds of content and keep you and your family safe on the Internet. Filtered content includes nudity, violence, gambling, and drug and alcohol abuse.

- Invest in/download child-safe Web browsers. These browsers go beyond your own browser’s filtering capabilities to only allow a list of safe sites pre-evaluated for content. The lists are long, so your child will not suffer from limitations imposed by the browser.

- Play on safe game sites through nonprofit organizations. YMCA, Center for Mission and Exploited Children, and Children’s Education Network are among a number of nonprofits that provide safe sites for children to explore on the Web. Many of them also teach through play to make learning fun.

More to come later. In the meantime, you may want to download our free Parents' Guide to Internet Safety pdf at www.geeksoncall.com/guide.

Geeks On Call is a leading provider of computer repair and computer service for home and business.

In The News

Geeks On Call Partners With Molly Maid
We are very excited about our partnerships with Service Brands International, a dynamic and community-active group of franchise businesses. Look for an announcement about yet another of the "brands" very soon. Geeks On Call is also looking forward to the Pink Hat Treatment from Molly Maid! To view press release, click here.

To view more Geeks On Call Value-Added Benefit Partners, click here.

Geeks On Call is a leading provider of computer repair and computer service for home and business.