you will need to patch up your server with ms08-067 ... then download a tool called kidokiller from kaspersky website to clean up the virus. also run the following nmap command on all you network machines and it will identify all machines that maybe hit with conficker which then you will run kido killer then patch them up...
nmap -PN -d -p139,445 --script=smb-check-vulns --script-args <ip>
or
Super user required due to stealth mode –sS option
nmap -sS -PN -d -p139,445 --script=smb-check-vulns --script-args <ip>
use the latest version of nmap...
this has been evident on new laptop setup..confiker variant is present
but being quarantined by eset nod32..
any network removal tool for confiker would help..
On Tue, Nov 24, 2009 at 3:59 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
>
>
> On Tue, Nov 24, 2009 at 3:42 PM, wallace ngene <wallacengene@gmail.com>
> wrote:
>>
>> kindly note that this occurs even after reformatting and reinstalling your
>> operating system...
>>
>
> It cannot be on a clean Windows install, unless you end up re-infecting the
> system using a certain media in your possession - like a flash disk!
>
> --
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254733744121/+254722743223
> _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
> "If you have nothing good to say about someone, just shut up!."
> -- Lucky Dube
>
> _______________________________________________
> Skunkworks mailing list
> Skunkworks@lists.my.co.ke
> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
> ------------
> Skunkworks Rules
> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
> ------------
> Other services @ http://my.co.ke
> Other lists
> -------------
> Announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce
> Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science
> kazi: http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general
>
--
WALLACE NGENE TARURU
wallacengene@gmail.com
_______________________________________________
Skunkworks mailing list
Skunkworks@lists.my.co.ke
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------
Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke
Other lists
-------------
Announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce
Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science
kazi: http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general