confickerAA 0 Posted September 5, 2014 Posted September 5, 2014 (edited) Dear Sir,we have using ESET Endpoint Version 5.0.2214.4, recently infected with conficker worm.AA it spreading over the network,we have no solutions to prevent the conficker worm A.A infected the workstation pc.had try to configure IDS setting it still infected the workstation pc by create a conficker file into windows folder and only removed it by eset endpoint security on windows section and it also created a task job, by it self.had try to make a full scan but no infection just got infection it spread over network and cleaned by endpoint itself and reinfected again after a few hours or day, however had try to disable autorun.inf using registry patchedit totally not able to block the conficker worm spread over the networkstation... it will infected and removed by eset endpoint only .. pls help Edited September 5, 2014 by Marcos
ESET Moderators Peter Randziak 1,181 Posted September 5, 2014 ESET Moderators Posted September 5, 2014 Hello, you can follow steps described in this comprehensive KB article about Conficker. Conficker – How do I protect myself? Let us know, how it went.
Administrators Marcos 5,441 Posted September 5, 2014 Administrators Posted September 5, 2014 Besides installing the appropriate hotfixes also make sure to change the password for administrator account to more sophisticated ones that cannot be brute-forced. The worm not only exploits a vulnerability in the RPC protocol to download Conficker from a remote http server, it can spread to network admin shares if they are not password protected or if a simple password is used.
confickerAA 0 Posted December 16, 2014 Author Posted December 16, 2014 (edited) has been applied all the hotfixes ran windows update, password has been changed to more complexity it still get infected...however only disable file and printer sharing port... the conficker AA only won't come and attack..is there any ways to prevent the conficker AA attack if my file and printer sharing port enable, because i need it to sharing printer over a network to other pc. by the ways that's no solutions from ESET smart security itself to blocked or clean conficker AA over the network.. you can follow steps described in this comprehensive KB article about Conficker. Conficker – How do I protect myself? <-- has been tried above method still no luck to get rid ofautorun has been disable , but still get infected through over network.the only solutions unthick file and printer sharing at network connection.but i no wan to disable it it may causes im not able to share my printer over network.Do Eset have any solutions on this case =) Thank in advance. Edited December 16, 2014 by confickerAA
Recommended Posts