Latest ads
-
Bodim.lk out now !- Manoj Suranga Bandara
- Updated:
-
Power Lifting Lever Belt- SkullVamp
- Updated:
-
port.lk Domain for sale
- Lankan-Tech
- Updated:
-
Colombo Kaduwela - Two Storey House for Sale- dilrasan
- Updated:
-
Wechat qr verification
- Pawan2005
- Updated:
All Anti-Virus Software (Mega Tread Updating!!)
- Thread starter gnate3_2009
- Start date
Its with trial reset.. That means your trial period wont go down. Itll always be 30 days. If you want keys tell me..yohantha said:
Ya update karanna puluwan..yohantha said:then that(trial reset1) would be fine.........update karagandath puluwan ne
After installing kaspersky, switch off the virus guard before installing the crack ok.. If not itll remove it telling its a virus. I checkrd it with, norton, its not a virus.. Good luck bro..gnate3_2009 said:Ya update karanna puluwan..
Microsoft Windows Defender
HTML:
http://www.microsoft.com/windows/products/winfamily/defender/default.msp
HTML:
http://uploading.com/files/LQFCHC2O/Microsoft_Windows_Defender_CW.rar.html
Autorun Virus Remover v2.3 Build 0209
Autorun Virus Remover provides protection against any malicious programs trying to attack via USB drive. When a USB device is inserted into your computer, Autorun Virus Remover will automatically scan it, block and delete autorun virus, trojans, and malicious code. Also, it can detect and remove USB virus such as autorun.inf virus in your computer.
Autorun Virus Remover can also remove the autorun virus due to which you can't open your hard disk and USB drive (Pen drive, Memory card) by double clicking. Autorun Virus Remover USB antivirus software to permanently protect offline computer against any USB virus without the need for signature updates. This light and easy to use solution is compatible with all software and doesn't slow down your computer at all.
or
Autorun Virus Remover provides protection against any malicious programs trying to attack via USB drive. When a USB device is inserted into your computer, Autorun Virus Remover will automatically scan it, block and delete autorun virus, trojans, and malicious code. Also, it can detect and remove USB virus such as autorun.inf virus in your computer.
Autorun Virus Remover can also remove the autorun virus due to which you can't open your hard disk and USB drive (Pen drive, Memory card) by double clicking. Autorun Virus Remover USB antivirus software to permanently protect offline computer against any USB virus without the need for signature updates. This light and easy to use solution is compatible with all software and doesn't slow down your computer at all.
HTML:
http://depositfiles.com/files/k9bofiy1bor
HTML:
http://uploading.com/files/9LA5PZ5M/Autorun.Virus.Remover.v2.3.Build.0209.rar.htmSpyware Doctor v6.0.1.440 Antivirus
PC Tools Spyware Doctor v6.0.1.440
SUPPLiED BY : iMST
RELEASE TYPE: Serial
PACKAGED BY : iMST
OS TYPE : Windows
http://www.pctools.com/
Don't compromise your security with second best!
* Recommended by experts and editors around the world as the best
Anti-Spyware.
* FREE customer support for all users.
* Frequent advanced updates ensure that you are always protected.
* Detects, removes and blocks all types of Spyware and Adware threats.
* Easiest to use with intelligent automatic protection.
* 100% Money Back Guarantee.
Best Spyware Protection. Used by Millions World Wide.
Spyware Doctor has been downloaded over 125 million times with millions
more downloads every week. People worldwide use and trust Spyware Doctor
to protect their PCs from spyware, adware and other online threats.
Spyware Doctor has consistently been awarded Editors' Choice, by leading
PC magazines and testing laboratories around the world, including United
States, United Kingdom, Sweden, Germany and Australia. In addition,
after leading the market in 2005, Spyware Doctor was awarded the
prestigious Best of the Year at the end of 2005 and again in 2006.
Spyware Doctor continues to be awarded the highest honors by many of the
world's leading PC publications such as PC World, PC Magazine, PC Pro,
PC Plus, PC Authority, PC Utilities, PC Advisor, PC Choice, Microdatorn,
Computer Bild and PC Answers Magazine.
Note: If you are choosing Anti-Spyware make sure you choose one that is
proven and has genuine awards from one or more world leading research
labs such a PC Magazine, PC World, CNET, PC Pro Magazine, PC Authority,
PC Answers and other trusted labs. More importantly do not use ratings
from unknown review websites, as often these are designed to mislead you
into purchase of affiliated, inferior or rogue product.
Detects, removes and blocks all types of Spyware.
Did you know that numerous programs tested against Spyware Doctor
detected only small fraction of Spyware and completely removed an even
smaller amount? Also most of them were unable to effectively block
Spyware in real time from being installed on users PC in the first place.
Spyware Doctor has the most advanced update feature that continually
improves its Spyware fighting capabilities on daily basis. As Spyware
gets more complex to avoid detection by AntiSpyware programs Spyware
Doctor responds with new technology to stay one step ahead.
Easiest to Use
Spyware Doctor is advanced technology designed especially for people,
not just experts. That is one reason why it won the People's Choice
Award in 2005, 2006 and 2007. It is automatically configured out of the
box to give you optimal protection with limited interaction so all you
need to do is install it for immediate and ongoing protection.
Spyware Doctor's advanced IntelliGuard technology only alerts users on a
true Spyware detection. This is significant because you should not be
interrupted by cryptic questions every time you install software, add a
site to your favorites or change your PC settings. Such messages can be
confusing and lead to undesirable outcomes such as inoperable programs,
lost favorites or even Spyware being allowed to install on the system.
We've done the research so you don't have to.
PC Tools Spyware Doctor v6.0.1.440
SUPPLiED BY : iMST
RELEASE TYPE: Serial
PACKAGED BY : iMST
OS TYPE : Windows
http://www.pctools.com/
Don't compromise your security with second best!
* Recommended by experts and editors around the world as the best
Anti-Spyware.
* FREE customer support for all users.
* Frequent advanced updates ensure that you are always protected.
* Detects, removes and blocks all types of Spyware and Adware threats.
* Easiest to use with intelligent automatic protection.
* 100% Money Back Guarantee.
Best Spyware Protection. Used by Millions World Wide.
Spyware Doctor has been downloaded over 125 million times with millions
more downloads every week. People worldwide use and trust Spyware Doctor
to protect their PCs from spyware, adware and other online threats.
Spyware Doctor has consistently been awarded Editors' Choice, by leading
PC magazines and testing laboratories around the world, including United
States, United Kingdom, Sweden, Germany and Australia. In addition,
after leading the market in 2005, Spyware Doctor was awarded the
prestigious Best of the Year at the end of 2005 and again in 2006.
Spyware Doctor continues to be awarded the highest honors by many of the
world's leading PC publications such as PC World, PC Magazine, PC Pro,
PC Plus, PC Authority, PC Utilities, PC Advisor, PC Choice, Microdatorn,
Computer Bild and PC Answers Magazine.
Note: If you are choosing Anti-Spyware make sure you choose one that is
proven and has genuine awards from one or more world leading research
labs such a PC Magazine, PC World, CNET, PC Pro Magazine, PC Authority,
PC Answers and other trusted labs. More importantly do not use ratings
from unknown review websites, as often these are designed to mislead you
into purchase of affiliated, inferior or rogue product.
Detects, removes and blocks all types of Spyware.
Did you know that numerous programs tested against Spyware Doctor
detected only small fraction of Spyware and completely removed an even
smaller amount? Also most of them were unable to effectively block
Spyware in real time from being installed on users PC in the first place.
Spyware Doctor has the most advanced update feature that continually
improves its Spyware fighting capabilities on daily basis. As Spyware
gets more complex to avoid detection by AntiSpyware programs Spyware
Doctor responds with new technology to stay one step ahead.
Easiest to Use
Spyware Doctor is advanced technology designed especially for people,
not just experts. That is one reason why it won the People's Choice
Award in 2005, 2006 and 2007. It is automatically configured out of the
box to give you optimal protection with limited interaction so all you
need to do is install it for immediate and ongoing protection.
Spyware Doctor's advanced IntelliGuard technology only alerts users on a
true Spyware detection. This is significant because you should not be
interrupted by cryptic questions every time you install software, add a
site to your favorites or change your PC settings. Such messages can be
confusing and lead to undesirable outcomes such as inoperable programs,
lost favorites or even Spyware being allowed to install on the system.
We've done the research so you don't have to.
HTML:
http://rapidshare.com/files/214616656/Spyware.Doctor.v6.0.1.440.zip
HTML:
Unpack.
Use the serial in the .NFO file.Kaspersky Offline Updater 3.1.0.7
The utility is updated to download and save in a separate directory updates databases and modules of Kaspersky Lab applications. C allows you to download updates for selected applications, Kaspersky Lab, established in your network or home computer.
The utility has the ability to save downloaded avtopatchi base and in the local folder to a network directory, which is connected to a disk file system on the machine, or on flash-drive. Currently, you can use the upgrade utility, which works on the operating systems Microsoft Windows. And in the near future we plan to issue an update utility for Unix.
The utility is updated to download and save in a separate directory updates databases and modules of Kaspersky Lab applications. C allows you to download updates for selected applications, Kaspersky Lab, established in your network or home computer.
The utility has the ability to save downloaded avtopatchi base and in the local folder to a network directory, which is connected to a disk file system on the machine, or on flash-drive. Currently, you can use the upgrade utility, which works on the operating systems Microsoft Windows. And in the near future we plan to issue an update utility for Unix.
HTML:
http://rapidshare.com/files/215984354/Kapersky_Offline_Updater_3.1.0.7.rar
Spyware Doctor 6.0.0.386 Final Full
Spyware Doctor™ provides three-way spyware protection for your PC through real-time threat blocking, advanced system scanning and immunization against known browser infections. Spyware Doctor is a multi-award winning spyware removal utility that detects, removes and protects your PC from thousands of potential spyware, adware, Trojans, keyloggers, spybots and tracking threats. Protect your privacy and computing habits from prying eyes and virtual trespassers with the help of Spyware Doctor.
Anti-virus software and firewalls do not fully protect your system against the majority of spyware and privacy threats. Because spyware is commonly bundled with software downloads, attached to e-mails, or transmitted through networks it can appear to be legitimate software, but once installed it can be nearly impossible to detect and remove without the help of a dedicated spyware removal tool like Spyware Doctor.
Spyware Doctor is advanced technology designed especially for people, not just experts. That is one reason why it won the People's Choice Award in 2005, 2006 and 2007. It is automatically configured out of the box to give you optimal protection with limited interaction so all you need to do is install it for immediate and ongoing protection.
Spyware Doctor's advanced OnGuard technology only alerts users on a true Spyware detection. This is significant because you should not be interrupted by cryptic questions every time you install software, add a site to your favorites or change your PC settings. Such messages can be confusing and lead to undesirable outcomes such as inoperable programs, lost favorites or even Spyware being allowed to install on the system. We've done the research so you don't have to.
Spyware Doctor Tools:
- Spyware & Adware Scanner Keylogger
- Guard Popup
- Blocker Phishing
- Protector Real Time
- Protection Browser
- Guard Spyware Cookie
- Guard Malware
- Immunizer
Spyware Doctor Key Features:
• Comprehensive Malware Protection
Spyware Doctor provides protection against identity theft, stealthy spyware, aggressive adware, browser hijackers, malicious ActiveX objects, malware Trojans, tracking cookies, keyloggers, dialers, and other malware. The optional anti-virus module also protects your computer from viruses, worms, Trojan horse threats, and other malicious infections.
• Constant Real-time Protection
Through its unique OnGuard feature Spyware Doctor provides constant protection against malware. OnGuard works by blocking both known and unknown malware threats before they can install and cause any harm to a computer. OnGuard constantly monitors for malicious behavior involving spyware processes, tracking cookies, malicious ActiveX objects, browser hijackers, keyloggers, Trojans and more.
• Advanced Detection and Removal Technology
- By running an Intelli-Scan™, Full Scan or Custom Scan, Spyware Doctor will inspect the computer for all types of spyware and virus1 infections. Spyware Doctor is top rated by industry experts as being extremely effective in removing particularly nefarious threats such as rootkits and keyloggers2.
- The unique Intelli-Scan™ feature is specifically designed to hunt swiftly and kill active running spyware threats in as little as 3 minutes3, attributed to the intuitive and patent-pending spider scanning technology. This new technology works intelligently by using a combination of signature and behavioral scanning techniques to quickly and effectively identify internet threats.
• Protection against zero-day threats - Behavioral Heuristic Detection
Spyware Doctor delivers effective zero day protection against rootkits and keyloggers (in both scanning and OnGuard real-time areas) by monitoring for suspicious behavior and blocking applications that exhibit signs of malicious activity.
• Advanced Rootkit Detection
Spyware Doctor is capable of detecting and removing hidden processes and files associated with complex threats and rootkits. Using behavioral techniques, rootkits and other items that attempt to hide themselves deep in the computer operating system are effectively detected and removed.
• Works silently in the background with low CPU usage
When in monitoring mode Spyware Doctor has been designed to work silently in the background, with little impact to the end user, threats are blocked and removed without any system impact, while only a small alert window is displayed to advise the user it has been protected against an attack. When running a scan, the CPU Priority settings allow users to lower the priority of the scanning in order to reduce CPU usage and impact to the computer while in use. Selecting this option may increase scan time but will ease CPU usage when other applications are running at the same time.
• Automatic and silent Smart Updates
Frequent updates to detect and guard computers against new threats and viruses as well as provide enhancements to Spyware Doctor are automatically installed and downloaded through the Smart Update function. Threat signatures are updated every business day or within hours of a high risk malware outbreak to protect you from the latest online threats.
• Most internationally awarded anti-spyware product
Spyware Doctor is consistently awarded editors choice and top rating by numerous internationally recognized and respected industry publications, making Spyware Doctor the most internationally awarded anti-spyware product. For a full listing of all our awards visit: http://www.pctools.com/company/awards/
Additional Add-ons:
• Virus Protection
Available as an optional add-on to Spyware Doctor, the anti-virus component provides protection against all kinds of viruses, worms, Trojan horse threats, and other malicious infections to ensure complete protection against internet threats. It is recommended to install the anti-virus add-on if there is no other virus protection on the computer.
• Email Protection
Email Guard provides protection against, and instantly removes, spyware and viruses being sent or received via e-mails. All popular e-mail applications (such as Outlook Express™ & Netscape® Mail and Thunderbird) that use POP, IMAP or SMTP are supported by Email Guard.
• Internet Browsing Protection
Site Guard provides advanced protection against potential malicious websites and phishing attacks where dangerous site are masquerading as legitimate e-Commerce sites. Site Guard will detect malicious websites and block access to them, ensuring the computer cannot be infected.
Designed for Windows® Vista™ 32-bit, XP and 2000.
What's New in Spyware Doctor 6.0 :
• Latest protection from unknown threats
- Spyware Doctor now has Behavior Guard, providing you with the latest pro-active behavioral-based technology against zero-day (never seen before) threats. Built on the award-winning ThreatFire technology, Behavior Guard has been seamlessly incorporated into Spyware Doctor to offer you leading protection. This new technology protects you when some anti-virus products give up! Read more about behavior-based protection.
• Improved detection capabilities:
- Spyware Doctor has been enhanced to improve detection effectiveness. In particular, each individual signature created in the threat database is optimized so that it is capable of detecting multiple variations of malware threats (threat variants) while maintaining minimal system resource usage (memory footprint).
• Swift clean-up for heavily infected computers:
- Spyware Doctor is able to detect and remove threats on heavily infected computers faster and easier than ever before. Sometimes your computer is so highly infected that you may find yourself unable to install or run security software except when in the ‘safe mode’ of Windows.
- In these cases, malware consumes computer resources so resulting in lengthy scanning and removal times. is now armed with the technology to scan in safe mode faster and more effectively by forcing your computer to take a higher priority over the scan than the malware and other software attempting to run on your system.
• Improved Hacker Defense :
- Further improvements have been included to enhance our own defense against malware threats attempting to interfere with the effectiveness of Spyware Doctor . Our hacker defense system means you can rest assured that your computer system has the most comprehensive protection while ensuring that malware threats don’t impede on the functionality or effectiveness of Spyware Doctor.
- The new hacker defense utilizes a particular feature available in Windows Vista (known as ASLR) to make it difficult for hackers to exploit or gain control over Spyware Doctor .
• Other enhancements:
o Support for Windows Security Centre in Windows Vista Service Pack 1
o The real-time protection module is now referred to as Intelli Guard®
o Enhanced error reporting to assist with diagnosis of program crashes (hackers!).
Install notes:
CODE
Full, update able version. Serials included.
Crack and license reseter also added.
USE ONLY SERIALS! Other stuff is just in case...
1. Install,
2. Update,
3. Use one of the serials,
4. Enjoy!
Serial :
Spyware Doctor™ provides three-way spyware protection for your PC through real-time threat blocking, advanced system scanning and immunization against known browser infections. Spyware Doctor is a multi-award winning spyware removal utility that detects, removes and protects your PC from thousands of potential spyware, adware, Trojans, keyloggers, spybots and tracking threats. Protect your privacy and computing habits from prying eyes and virtual trespassers with the help of Spyware Doctor.
Anti-virus software and firewalls do not fully protect your system against the majority of spyware and privacy threats. Because spyware is commonly bundled with software downloads, attached to e-mails, or transmitted through networks it can appear to be legitimate software, but once installed it can be nearly impossible to detect and remove without the help of a dedicated spyware removal tool like Spyware Doctor.
Spyware Doctor is advanced technology designed especially for people, not just experts. That is one reason why it won the People's Choice Award in 2005, 2006 and 2007. It is automatically configured out of the box to give you optimal protection with limited interaction so all you need to do is install it for immediate and ongoing protection.
Spyware Doctor's advanced OnGuard technology only alerts users on a true Spyware detection. This is significant because you should not be interrupted by cryptic questions every time you install software, add a site to your favorites or change your PC settings. Such messages can be confusing and lead to undesirable outcomes such as inoperable programs, lost favorites or even Spyware being allowed to install on the system. We've done the research so you don't have to.
Spyware Doctor Tools:
- Spyware & Adware Scanner Keylogger
- Guard Popup
- Blocker Phishing
- Protector Real Time
- Protection Browser
- Guard Spyware Cookie
- Guard Malware
- Immunizer
Spyware Doctor Key Features:
• Comprehensive Malware Protection
Spyware Doctor provides protection against identity theft, stealthy spyware, aggressive adware, browser hijackers, malicious ActiveX objects, malware Trojans, tracking cookies, keyloggers, dialers, and other malware. The optional anti-virus module also protects your computer from viruses, worms, Trojan horse threats, and other malicious infections.
• Constant Real-time Protection
Through its unique OnGuard feature Spyware Doctor provides constant protection against malware. OnGuard works by blocking both known and unknown malware threats before they can install and cause any harm to a computer. OnGuard constantly monitors for malicious behavior involving spyware processes, tracking cookies, malicious ActiveX objects, browser hijackers, keyloggers, Trojans and more.
• Advanced Detection and Removal Technology
- By running an Intelli-Scan™, Full Scan or Custom Scan, Spyware Doctor will inspect the computer for all types of spyware and virus1 infections. Spyware Doctor is top rated by industry experts as being extremely effective in removing particularly nefarious threats such as rootkits and keyloggers2.
- The unique Intelli-Scan™ feature is specifically designed to hunt swiftly and kill active running spyware threats in as little as 3 minutes3, attributed to the intuitive and patent-pending spider scanning technology. This new technology works intelligently by using a combination of signature and behavioral scanning techniques to quickly and effectively identify internet threats.
• Protection against zero-day threats - Behavioral Heuristic Detection
Spyware Doctor delivers effective zero day protection against rootkits and keyloggers (in both scanning and OnGuard real-time areas) by monitoring for suspicious behavior and blocking applications that exhibit signs of malicious activity.
• Advanced Rootkit Detection
Spyware Doctor is capable of detecting and removing hidden processes and files associated with complex threats and rootkits. Using behavioral techniques, rootkits and other items that attempt to hide themselves deep in the computer operating system are effectively detected and removed.
• Works silently in the background with low CPU usage
When in monitoring mode Spyware Doctor has been designed to work silently in the background, with little impact to the end user, threats are blocked and removed without any system impact, while only a small alert window is displayed to advise the user it has been protected against an attack. When running a scan, the CPU Priority settings allow users to lower the priority of the scanning in order to reduce CPU usage and impact to the computer while in use. Selecting this option may increase scan time but will ease CPU usage when other applications are running at the same time.
• Automatic and silent Smart Updates
Frequent updates to detect and guard computers against new threats and viruses as well as provide enhancements to Spyware Doctor are automatically installed and downloaded through the Smart Update function. Threat signatures are updated every business day or within hours of a high risk malware outbreak to protect you from the latest online threats.
• Most internationally awarded anti-spyware product
Spyware Doctor is consistently awarded editors choice and top rating by numerous internationally recognized and respected industry publications, making Spyware Doctor the most internationally awarded anti-spyware product. For a full listing of all our awards visit: http://www.pctools.com/company/awards/
Additional Add-ons:
• Virus Protection
Available as an optional add-on to Spyware Doctor, the anti-virus component provides protection against all kinds of viruses, worms, Trojan horse threats, and other malicious infections to ensure complete protection against internet threats. It is recommended to install the anti-virus add-on if there is no other virus protection on the computer.
• Email Protection
Email Guard provides protection against, and instantly removes, spyware and viruses being sent or received via e-mails. All popular e-mail applications (such as Outlook Express™ & Netscape® Mail and Thunderbird) that use POP, IMAP or SMTP are supported by Email Guard.
• Internet Browsing Protection
Site Guard provides advanced protection against potential malicious websites and phishing attacks where dangerous site are masquerading as legitimate e-Commerce sites. Site Guard will detect malicious websites and block access to them, ensuring the computer cannot be infected.
Designed for Windows® Vista™ 32-bit, XP and 2000.
What's New in Spyware Doctor 6.0 :
• Latest protection from unknown threats
- Spyware Doctor now has Behavior Guard, providing you with the latest pro-active behavioral-based technology against zero-day (never seen before) threats. Built on the award-winning ThreatFire technology, Behavior Guard has been seamlessly incorporated into Spyware Doctor to offer you leading protection. This new technology protects you when some anti-virus products give up! Read more about behavior-based protection.
• Improved detection capabilities:
- Spyware Doctor has been enhanced to improve detection effectiveness. In particular, each individual signature created in the threat database is optimized so that it is capable of detecting multiple variations of malware threats (threat variants) while maintaining minimal system resource usage (memory footprint).
• Swift clean-up for heavily infected computers:
- Spyware Doctor is able to detect and remove threats on heavily infected computers faster and easier than ever before. Sometimes your computer is so highly infected that you may find yourself unable to install or run security software except when in the ‘safe mode’ of Windows.
- In these cases, malware consumes computer resources so resulting in lengthy scanning and removal times. is now armed with the technology to scan in safe mode faster and more effectively by forcing your computer to take a higher priority over the scan than the malware and other software attempting to run on your system.
• Improved Hacker Defense :
- Further improvements have been included to enhance our own defense against malware threats attempting to interfere with the effectiveness of Spyware Doctor . Our hacker defense system means you can rest assured that your computer system has the most comprehensive protection while ensuring that malware threats don’t impede on the functionality or effectiveness of Spyware Doctor.
- The new hacker defense utilizes a particular feature available in Windows Vista (known as ASLR) to make it difficult for hackers to exploit or gain control over Spyware Doctor .
• Other enhancements:
o Support for Windows Security Centre in Windows Vista Service Pack 1
o The real-time protection module is now referred to as Intelli Guard®
o Enhanced error reporting to assist with diagnosis of program crashes (hackers!).
Install notes:
CODE
Full, update able version. Serials included.
Crack and license reseter also added.
USE ONLY SERIALS! Other stuff is just in case...
1. Install,
2. Update,
3. Use one of the serials,
4. Enjoy!
HTML:
http://rapidshare.com/files/211640242/Spyware_Doctor_6.0.0.386.rarSerial :
HTML:
http://rapidshare.com/files/211634126/S_D_new_serial_6.0.0.386.rarMcAfee Threat Center - News
McAfee Threat Center - News
Identifying and removing Conficker
There’s been a lot of talk about how Conficker is going to create havoc on April 1. Conficker, formally named W32/Conficker.worm, began infecting systems at the end of 2008 by exploiting a vulnerability in Microsoft Windows. Since then McAfee has seen two more variants of this worm and many binaries – files ready to load into memory and execute – that carry the worm’s malicious payload. Conficker.C is the latest variant. Its “call-home protocol” will change on Wednesday, April 1, and may entail an update with some as-yet unknown functionality.
McAfee already offers protection from the Conficker worm in its endpoint and network products, and Microsoft has issued a security patch for the vulnerability that the Conficker family has used to propagate. Yet many computer users continue to worry about infection. The information below will help you understand more about the worm, the steps you can take to clean an infected system, and measures to prevent reinfection.
What is the Conficker worm?
Conficker.C is the most recent variant of the Conficker worm. Exposure to Conficker.C is limited to systems that are still infected with the earlier variants, Conficker.A and Conficker.B, which operate by exploiting the MS08-067 vulnerability in Microsoft Windows Server Service. If the vulnerability is successfully exploited, it could allow remote code execution when file sharing is enabled. Conficker combats efforts at eradication by creating scheduled tasks and/or using autorun.inf files to reactivate itself.
McAfee has identified thousands of binaries that carry the Conficker payload. Depending on the specific variant, the worm may spread via LAN, WAN, web, or removable drives, and by exploiting weak passwords. Conficker disables several important system services and security products, and downloads arbitrary files. Computers infected with the worm become part of an “army” of compromised computers and could be used to launch attacks on websites, distribute spam, host phishing websites, or carry out other malicious activities.
How to tell if your system is infected
Symptoms of Conficker infection include the following:
Access to security-related sites is blocked
Users are locked out of the directory
Traffic is sent through port 445 on non-Directory Service (DS) servers
Access to admininistrator shared drives is denied
Autorun.inf files are placed in the recycled directory, or trash bin
Steps to remove Conficker and prevent re-infection
We recommend customers take the following steps to remove W32/Conficker.worm and prevent it from spreading:
Install Microsoft Security Update MS08-067: http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
Clean the infected systems, and reboot
Use anti-malware solutions such as McAfee VirusScan Plus or ToPS for Endpoint to clean the infection. Use behavioral detection techniques like the buffer overflow protection in Host IPS to prevent future infections. This is important because Conficker can propagate via portable media such as infected USB drives. As the media are accessed, the system processes autorun.inf and executes the attack. For more information, read McAfee Avert Labs’ document “Combating Conficker Worm.”
Identify other systems at risk of infection
You need to identify which systems are at risk. The list includes systems that either are not patched against Microsoft vulnerability MS08-067 or do not have proactive protection controls to mitigate the vulnerability. McAfee Vulnerability Manager and ePolicy Orchestrator can identify systems that are vulnerable and not protected.
Limit the threat’s ability to propagate
Using network IPS at strategic points in your network will quickly limit the ability of the threat to spread. This gives you time to either update your client anti-virus signatures or modify policies to block the threat using the behavioral controls.
McAfee Products Coverage for Conficker
McAfee VirusScan Plus
McAfee Internet Security
McAfee Total Protection
The latest signature (DAT) files include detection and repair for this worm, if you have performed an update recently you are already covered.
ToPS Endpoint & ToPS Service
The signature (DAT) files include detection and repair for this worm
Buffer overflow protection in scan engine and Generic Buffer Overflow in host IPS are expected to cover code-execution exploits. Host IPS also includes signature for “Vulnerability in Server Service Could Allow Remote Code Execution” (CVE-2008-4250)
Network Security Platform (IntruShield)
Includes coverage for “Microsoft Server Service Remote Code Execution Vulnerability"
McAfee Network Access Control (NAC)
Identifies nodes that have not been patched and denies them access to the network unless they are updated
McAfee Vulnerability Manager (VM)
Includes coverage for MS08-067. Identifies machines vulnerable to infection by Conficker as well as machines infected by Conficker C
McAfee Web Gateway (formerly Webwasher)
Includes signature to detect and block the worm at the gateway
McAfee Conficker Detection Tool
Identifies machines infected by Conficker.C
McAfee Threat Center - News
Identifying and removing Conficker
There’s been a lot of talk about how Conficker is going to create havoc on April 1. Conficker, formally named W32/Conficker.worm, began infecting systems at the end of 2008 by exploiting a vulnerability in Microsoft Windows. Since then McAfee has seen two more variants of this worm and many binaries – files ready to load into memory and execute – that carry the worm’s malicious payload. Conficker.C is the latest variant. Its “call-home protocol” will change on Wednesday, April 1, and may entail an update with some as-yet unknown functionality.
McAfee already offers protection from the Conficker worm in its endpoint and network products, and Microsoft has issued a security patch for the vulnerability that the Conficker family has used to propagate. Yet many computer users continue to worry about infection. The information below will help you understand more about the worm, the steps you can take to clean an infected system, and measures to prevent reinfection.
What is the Conficker worm?
Conficker.C is the most recent variant of the Conficker worm. Exposure to Conficker.C is limited to systems that are still infected with the earlier variants, Conficker.A and Conficker.B, which operate by exploiting the MS08-067 vulnerability in Microsoft Windows Server Service. If the vulnerability is successfully exploited, it could allow remote code execution when file sharing is enabled. Conficker combats efforts at eradication by creating scheduled tasks and/or using autorun.inf files to reactivate itself.
McAfee has identified thousands of binaries that carry the Conficker payload. Depending on the specific variant, the worm may spread via LAN, WAN, web, or removable drives, and by exploiting weak passwords. Conficker disables several important system services and security products, and downloads arbitrary files. Computers infected with the worm become part of an “army” of compromised computers and could be used to launch attacks on websites, distribute spam, host phishing websites, or carry out other malicious activities.
How to tell if your system is infected
Symptoms of Conficker infection include the following:
Access to security-related sites is blocked
Users are locked out of the directory
Traffic is sent through port 445 on non-Directory Service (DS) servers
Access to admininistrator shared drives is denied
Autorun.inf files are placed in the recycled directory, or trash bin
Steps to remove Conficker and prevent re-infection
We recommend customers take the following steps to remove W32/Conficker.worm and prevent it from spreading:
Install Microsoft Security Update MS08-067: http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
Clean the infected systems, and reboot
Use anti-malware solutions such as McAfee VirusScan Plus or ToPS for Endpoint to clean the infection. Use behavioral detection techniques like the buffer overflow protection in Host IPS to prevent future infections. This is important because Conficker can propagate via portable media such as infected USB drives. As the media are accessed, the system processes autorun.inf and executes the attack. For more information, read McAfee Avert Labs’ document “Combating Conficker Worm.”
Identify other systems at risk of infection
You need to identify which systems are at risk. The list includes systems that either are not patched against Microsoft vulnerability MS08-067 or do not have proactive protection controls to mitigate the vulnerability. McAfee Vulnerability Manager and ePolicy Orchestrator can identify systems that are vulnerable and not protected.
Limit the threat’s ability to propagate
Using network IPS at strategic points in your network will quickly limit the ability of the threat to spread. This gives you time to either update your client anti-virus signatures or modify policies to block the threat using the behavioral controls.
McAfee Products Coverage for Conficker
McAfee VirusScan Plus
McAfee Internet Security
McAfee Total Protection
The latest signature (DAT) files include detection and repair for this worm, if you have performed an update recently you are already covered.
ToPS Endpoint & ToPS Service
The signature (DAT) files include detection and repair for this worm
Buffer overflow protection in scan engine and Generic Buffer Overflow in host IPS are expected to cover code-execution exploits. Host IPS also includes signature for “Vulnerability in Server Service Could Allow Remote Code Execution” (CVE-2008-4250)
Network Security Platform (IntruShield)
Includes coverage for “Microsoft Server Service Remote Code Execution Vulnerability"
McAfee Network Access Control (NAC)
Identifies nodes that have not been patched and denies them access to the network unless they are updated
McAfee Vulnerability Manager (VM)
Includes coverage for MS08-067. Identifies machines vulnerable to infection by Conficker as well as machines infected by Conficker C
McAfee Web Gateway (formerly Webwasher)
Includes signature to detect and block the worm at the gateway
McAfee Conficker Detection Tool
Identifies machines infected by Conficker.C
Similar threads
