We have received quite a number of reports of the Conficker worm making it’s rounds in Malaysia. This is not isolated to Malaysia, but is widespread throughout the world. It seems that almost all AV Vendors are having tough time dealing with it . Below is some information that will help to identify , fix and resolve the same – Note that detection & cleaning of the worm is taken into account with the latest Forefront signature.
Summary, Analysis, Prevention & Recovery
Good News for ISA Customers- There are scripts available publically from http://www.isatools.org/tools.asp?Context=ISA2006, http://www.isatools.org/tools.asp?Context=ISA2004 à “block conficker.vbs <http://www.isatools.org/tools/block_conficker.vbs> ” which will block the worm at perimeter level itself.