Warning about malware

[arenee]

I just watched an article on 60 min about internet security programs. One of the things the newest worm does is to prevent your security program from updating. I looked at my spyware and the last update was in Jan of 2009.

According to 60 min, there is a worm that may wake on the 1st of April.

With all of our exposure, I would backup and protect your digi supplies....
Off to back-up.

Renee

[digideb]

Oh wow. I will be mentioning this to DH. Scary!

[snowdrop]

I saw the same story. Viruses & spyware are SO scary. People who do things like that...

[AnnieBananie]

I think Elizabeth mentioned this the other day... it's called the Conflicker worm unless there's another one. Gah... scary stuff!

[Priscilla]

that's the same one my husband mentioned.

[CA Dreamer]

Thanks for the reminder! It is a good idea to back up. I have been meaning to backup to DVD, and that is as good a reason as any! I have Mozy going, but still... if the threat is global, what if they are hit too....

[joelsgirl]

Good call. Backing up tonight.

Will I be safe if I just don't log onto the Internet Ap 1?

[scrapmonkey]

My DH saw the same thing and is already planning to back it up today while I'm at work....

[Nonnie917]

I got an email about this too. Checked with Snopes and it's true. Then I read an article on Comcast home page about this worm. I am staying off my computer on the 1st and unplugging it from the internet.

[Libby Pritchett]

Someone correct me if I'm wrong, but I thought that the problem was that the worm had already infected millions of computers (without our knowledge). And it will be active on April 1? So if you already have it, I wouldn't think staying offline on wednesday would help?

I'm seriously curious, so if someone has more info than I do, I'd love to know for sure.

[kscwgirl]

That's the impression I'm getting too, Libby. Gah.

[AnnieBananie]

From the snopes article:

Beginning on 1 April 2009, infected computers will start attempting to "call home" (i.e., contact control servers in the botnet) in order to receive Conficker updates

The major AV programs have the definitions for the virus so if you have it and your stuff is up to date, a scan likely would have shown it.

Here is Microsoft's virus alert for it and steps to prevent it ("prevention" tab)... it also tells how to keep it from spreading if you do have it.

[mummytothree]

Originally Posted by Libby Weifenbach

Someone correct me if I'm wrong, but I thought that the problem was that the worm had already infected millions of computers (without our knowledge). And it will be active on April 1? So if you already have it, I wouldn't think staying offline on wednesday would help?

I'm seriously curious, so if someone has more info than I do, I'd love to know for sure.

Yep what Libby said....it began showing up on computers clear back in November. Definitly check out the web addy Annie posted and here is one that Microsoft sent out for a patch http://www.microsoft.com/technet/sec.../MS08-067.mspx (not to ward off the worm but to plug a hole that it might exploit) and you can check out this addy http://support.microsoft.com/kb/962007 for tools and instruction on removing the worm if you already have it!!!

[nikkiARNGwife]

Originally Posted by mummytothree

Yep what Libby said....it began showing up on computers clear back in November. Definitly check out the web addy Annie posted and here is one that Microsoft sent out for a patch http://www.microsoft.com/technet/sec.../MS08-067.mspx (not to ward off the worm but to plug a hole that it might exploit) and you can check out this addy http://support.microsoft.com/kb/962007 for tools and instruction on removing the worm if you already have it!!!

How do you know if you have it? will mcafee pick it up?

[mummytothree]

Originally Posted by nikkiARNGwife

How do you know if you have it? will mcafee pick it up?

From what I understand Nikki is that this bug is "programed" to not let you computer update any type of security software...so as long as you computer is still scanning daily and updating your anti virus/spyware stuff then you are "OK"

Here are the "symptoms" listed on the second link I gave

If your computer is infected with this worm, you may not experience any symptoms, or you may experience any of the following symptoms:

* Account lockout policies are being tripped.
* Automatic Updates, Background Intelligent Transfer Service (BITS), Windows Defender, and Error Reporting Services are disabled.
* Domain controllers respond slowly to client requests.
* The network is congested.
* Various securityelated Web sites cannot be accessed.

As long as these things ARE NOT happening to you I think you are pretty safe!!

[joelsgirl]

So I have this Trojan downloader that Malware can't get rid of and avast doesn't even find. What do I do????

NOw I'm totally freaked out.

AND if I have the worm on my co mpujter and back my computer up to my external hard drive, then won't it infect my ehd as well?

[nikkiARNGwife]

Originally Posted by joelsgirl

So I have this Trojan downloader that Malware can't get rid of and avast doesn't even find. What do I do????

NOw I'm totally freaked out.

AND if I have the worm on my co mpujter and back my computer up to my external hard drive, then won't it infect my ehd as well?

Kellie...I was worried that McAfee/Malwarebytes wasn't picking stuff up so yesterday I went here to Window's Live One Scan and ran a full scan - they let you have one free scan before you purchase and it found a Trojan downloader as well and removed it. This morning I got updates from Microsoft so I'm thinking if that's what it was it got rid of it. The scan took all day yesterday but I feel much better about it now. I'm thinking about purchasing this as my antivirus from now on. We get McAfee free from the govt but if it's not worth poo then why use it right?

[AnnieBananie]

Originally Posted by joelsgirl

So I have this Trojan downloader that Malware can't get rid of and avast doesn't even find. What do I do????

NOw I'm totally freaked out.

AND if I have the worm on my co mpujter and back my computer up to my external hard drive, then won't it infect my ehd as well?

You could try Microsoft's malicious software removal tool maybe... dunno if that'll work but it's worth a try.
http://www.microsoft.com/security/ma...e/default.mspx

[joelsgirl]

Nope, that Microsoft thing didn't find it, but the trojan zlob isn't on the list of viruses it detects. That makes me safe, right?

[Sharon Kay]

Thanks for posting this...I just checked and my computer hadn't done any windows updates since the end of January...whoops I had it set for ME to do the updates and I had forgotten. Going to check all our computers and find out what their settings are and do a lot of "cleaning house" (sweeping) today! Thanks for the heads up.

[newfiemountiewife]

I'm all backed up anyway, so whatever will be, will be, I suppose. Meh, I hate this crap.

[nikkiARNGwife]

The microsoft malicious removal thing didn't work for me either...DH sent me the link to the Windows One Scan and said that's what they had been told to use on their personal PCs. It did find the Trojan so I think it works.

[Megan Turnidge]

My McAfee had run out, so I installed the new version YESTERDAY and then right after that I started getting warnings that Windows Defender had been disabled and was no longer working. Now I'm all freaked out....

I'm backed up, but I'm worried it infected my EHD too if my computer has it.

[Julie Billingsley]

I was just reading this on the Yahoo news and thought I'd pass it along because this guy says that if you can start your computer in safe mode then you are safe??? Uh, read the article and see if you think that is what he says too. http://tech.yahoo.com/blogs/null/132464 I was able to start my computer in safe mode, but how in the world does this guy know that means that I'm okay?

[Tracie Stroud]

THe Malware Bytes thing didn't find anything, so I *hope* I'm ok. lol