conficker News and Other Resources

Whitepapers

Detecting Algorithmically Generated Domain-Flux Attacks With DNS Traffic Analysis

January 11, 2012 12:00am PST

Recent Botnets such as Conficker, Kraken and Torpig have used DNS based "Domain fluxing" for command-and-control, where each Bot queries for existence of a series of domain names and the owner has...

Provided by: Institute of Electrical & Electronic Engineers

Whitepapers

A Large-Scale Empirical Study of Conficker

October 18, 2011 12:00am PDT

Conficker is the most recent widespread, well-known worm/bot. According to several reports, it has infected about 7 million to 15 million hosts and the victims are still increasing even now. In...

Provided by: Institute of Electrical & Electronic Engineers

White Papers

An Evaluation of Trading Bands as Indicators for Network Telescope Datasets

August 4, 2011 12:00am PDT

Large scale viral outbreaks such as Conficker, the Code Red worm and the Witty worm illustrate the importance of monitoring malevolent activity on the Internet. Careful monitoring of anomalous...

Provided by: Rhodes University

Whitepapers

Winning With DNS Failures: Strategies for Faster Botnet Detection

July 26, 2011 12:00am PDT

Botnets such as Conficker and Torpig utilize high entropy domains for fluxing and evasion. Bots may query a large number of domains, some of which may fail. In this paper, the authors present...

Provided by: Texas A&M University

Q&A

How to remove Conficker from Network?

May 9, 2011 9:37am PDT

How to remove Conficker from Network? (Windows XP/7 network) Our Domain administrator accounts were being locked at first then User accounts were being locked out at random. We started scanning...

5 Started by Snuffy09 | Latest comment by TheChas

White Papers

Detecting Algorithmically Generated Malicious Domain Names

November 3, 2010 12:00am PDT

Recent Botnets such as Conficker, Kraken and Torpig have used DNS based "Domain fluxing" for command-and-control, where each Bot queries for existence of a series of domain names and the owner has...

Provided by: Association for Computing Machinery

Case Studies

Schools Switch to Trend Micro Endpoint Security Platform

August 18, 2010 12:00am PDT

Bay County challenges are to clean up Conficker virus and prevent vulnerabilities that could lead to similar attacks in the future, increase visibility over the status of security at any point in...

Provided by: Trend Micro

Q&A

how to remover the conficker virus from the network

March 12, 2010 5:12pm PST

This is M$'s recommendation http://support.microsoft.com/kb/962007 But depending on the network involved it may not be enough. ;) Col And then update....

4 Started by baverett | Latest comment by Mohammad Oweis

Discussion Threads

Windows kernel-mode vulnerability: Will it be the next Conficker?

November 12, 2009 12:07pm PST

Windows kernel-mode vulnerability: Will it be the next Conficker? article root Windows kernel-mode driver vulnerability could be bad MS09-065 fixes a bug that has the potential to be exploited on...

33 Started by Michael Kassner | Latest comment by kevlar700

Blog Post

Windows kernel-mode vulnerability: Will it be the next Conficker?

November 12, 2009 11:39am PST

Conficker is one successful piece of malware, residing on seven million computers, with more infected every day. Experts are concerned the kernel-mode driver bug has the same potential.

33 Latest comment by kevlar700

Downloads

Panda USB Vaccine 1.0.1.4 (Windows)

October 7, 2009 12:00am PDT

Panda USB Vaccine is a free utility from Panda Research which helps prevent malware infections due to the autorun feature of Windows Operating Systems. Once executed the user can choose two types...

Provided by: Panda Security

Discussion Threads

It's Microsoft Patch Tuesday: September 2009

September 9, 2009 7:16am PDT

It's Microsoft Patch Tuesday: September 2009 article root September 2009 Patch Tuesday feedback Did you have (or are you having) trouble with this month's patch? Do you find it helpful that...

33 Started by Mary Weilage | Latest comment by knutvm@...

Discussion Threads

Cybersecurity: It's our problem

July 13, 2009 2:12pm PDT

Cybersecurity: It's our problem article root A rather unique way of approaching Cybersecurity I'd love to hear your opinion on whether Brenner and Clarke (two law professors) have an a valid...

289 Started by Michael Kassner | Latest comment by helpwithvb@...

White Papers

Internet Special Ops - Stalking Badness Through Data Mining

July 11, 2009 12:00am PDT

Today's Internet threats are global in nature. Identifying, enumerating and mitigating these incidents require the collection and analysis of unprecedented amounts of data, which is only possible...

Provided by: Internet Systems Consortium

White Papers

Laying the IT Security Foundation: Key Steps to Preventing Cyber Attacks

June 1, 2009 12:00am PDT

The traditional security approach addresses each individual attack as it crops up through a detect and blocking schema. However in today's ever-changing IT environment, sophisticated threats such...

Provided by: Lumension

White Papers

Pushdo Cutwail: A Study of the Pushdo Cutwail Botnet

May 22, 2009 12:00am PDT

The Pushdo botnet has been with around since January 20071. The botnet is also known as Pandex or Cutwail. While it does not grab as many headlines as its attention-seeking peers such as Storm or...

Provided by: Trend Micro

Discussion Threads

Want to understand Conficker?

May 11, 2009 4:54pm PDT

Want to understand Conficker? I've just listened to Steve Gibson's podcast about Conficker. A-C and it's by far the best explanation of how the worm works that I've listened to/read about....

3 Started by Michael Kassner | Latest comment by Jacky Howe

Discussion Threads

GhostNet: Why it's a big deal

April 14, 2009 4:54am PDT

GhostNet: Why it's a big deal article root GhostNet: Internet espionage and intrigue Strange name yet very appropriate as electronic surveillance of several offices related to international...

203 Started by Michael Kassner | Latest comment by JCitizen

Downloads

McAfee Avert Stinger for W32/Conficker 10.0.1.551 (Windows)

April 9, 2009 12:00am PDT

McAfee now offers a special build of its standalone cleaning tool Stinger, specifically created to remove the Conficker virus. It will be updated on a regular basis to include any undetected...

Provided by: McAfee