A new variant of worm_downad (aka Conficker) is expected to be launched on April Fool’s day.
Trend Micro detects this new variant as worm_downad.kk. More information can be found at http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DOWNAD.KK&VSect=T. Trend Micro detects this malware starting with pattern file 5.885.00.
Compared to the old variants, worm_downad.kk is more sophisticated. Here are a few of the payloads :
- Connects to various time servers to determine the current date and time.
- Register itself as a system service to ensure auto execution every startup.
- Deletes a registry key to prevent system startup in safe mode.
- Terminates security-related processes (i.e. procexp, regmon, autoruns, gmer etc.)
- Blocks access to security and antivirus websites.
- Generates 50,000 malicious URLs and attempts to connect to around 500 random generated URLs at a time.
Recommended Action
- Enable Web Reputation Service
- Make sure that you have the latest virus definitions (at least pattern file 5.885.00)
- Run a FULL system scan to ensure that malware does not exist on your PC
- Apply MS 08-067
- Ensure strong password practice
- Disable autorun.inf for removeable devices
- For file sharing server, don’t share to everyone.

Do buyers become more or less impulsive, or, more or less reliant on the advice of others as they move about? Are they harder to find or easier to win over situationally? Stay tuned to this space for some answers.
Posted by: viagra online | 09/21/2010 at 12:59 AM
http://legalusdrugstore.com/13.jpg
north shore pharmacy huntington http://legalusdrugstore.com/products/nolvadex.htm medco pharmacy plant indiana furosemide
propecia pharmacy approved http://legalusdrugstore.com/products/hyzaar.htm homemed pharmacy llc how to file a complaint against a pharmacy in california
a m pharmacy http://legalusdrugstore.com/categories/healthy-bones.htm pharmacy price checker accutane
online pharmacy in us http://legalusdrugstore.com/products/confido.htm budget pharmacy mexico pharmacy suboxone
http://legalusdrugstore.com/products/nimotop.htm verderosa pharmacy
Posted by: dypeDedieni | 12/14/2011 at 05:01 PM