Dennis Bottjer | ASP.NET + SharePoint Architect, Trainer & Speaker

"An Ounce of Prevention is Worth a Pound of Cure" - Ben Franklin
posts - 168, comments - 59, trackbacks - 41

My Links


Add to Technorati Favorites The views expressed in this blog are mine and mine alone, not that of my employer, Microsoft, or anyone else’s. No warrantee is given for the quality of any material on this site.

Tag Cloud


Post Categories

Malicious Software Removal Tool Update (Win32/Conficker.b)

I received the following information from my MVP Lead Suzanna.  She asked that we pass it on to help reduce infections.

Malicious Software Removal Tool

History: Win32/Conficker.B


Based on feedback from MVP's and other sources, we are concerned about the rise in reported infections due to the worm Win32/Conficker.B also known as “Downadup.”  Though systems which have already applied the out-of-band released MS08-067 in October 2008 are protected, un-patched system user have experienced system lockout and other problems. 
Last week, we released a version of the Malicious Software Removal tool (MSRT) that can help remove variants of Win32/Conficker and other resources.  Please share this information in your communities to help address this threat.


Win32/Conficker.B exploits a vulnerability in the Windows Server service (SVCHOST.EXE) for Windows 2000, Windows XP, Windows Vista, Windows Server 2003, and Windows 2008. While Microsoft addressed this issue in October with Microsoft Security Bulletin MS08-067, and Forefront antivirus and OneCare (as well as other vendor’s anti-virus products) helped protect against infections, many systems that have not been patched manually through Server Update Services and Microsoft/Windows Update or through Automatic Updates have recently come under attack by this worm.  Attacked systems may lock out users, disable our update services and block access to security-related Web sites:

In response to this threat, Microsoft has:
•        Updated the January version of the MSFT to detect and remove variants of Win32/Conficker.B.  You can download this version from the MSRT from either the Microsoft Update site or through its associated Knowledge Base article.
•        Created the KB article 962007 “Virus alert about the Win32/Conficker.B worm” to provide public details on the symptoms and removal methods available to address this issue.
•        Announced the release of the items and the virus threat itself on the Microsoft Malware Protection Center blog.

Print | posted on Wednesday, January 21, 2009 5:28 AM | Filed Under [ Community & Events News & Announcements ]



# Malicious Software Removal Tool Update (Win32/Conficker.b) | The Black Ball

1/21/2009 11:51 AM |
Comments have been closed on this topic.

Powered by: