Patches
There is a little more to this worm than is being made clear
Already patched machines do get infected, either via windows shares or careless use of USB memory sticks
My fully patches machine was hit via a shared folder from a server in work. Both the server and laptop had a fully up to date version of CA antivirus.
Even when infection has been cleaned the rootkit he worm installs simply makes it look like the patch was applied (in reality it hasnt been)
Additionaly the CA antivirus (for example) CANT fully disinfect Conficker it requires several additional tools. In addition it appears that CA don't think that they will be able to include proper disinfection within their regular AV package.
From other accounts Sophos didn't manage to clean machines particularly well either, so don't expect things to get better for a while.
There's whole IT companys infected in the UK and I doubt that the rest of the world is any better in this respect
AC cos you never know who is watching
Opinion
David McLeman
Tim Worstall
Chris Mellor
Popular Stories
Features