Configure Virus and Configure Worm on 60 Minutes

Configure Virus and Configure Worm on 60 Minutes
There are two common misspellings for the Conficker Virus: Configure Virus and Configure Worm. If you were searching for Configure Virus and Configure Worm because you heard about it on 60 Minutes, you probably misheard Lesley Stahl on 60 minutes, and you’re looking for the information about the Conficker Virus.

If you’re infected with the virus, you should buy anti-virus software immediately!.

What is the Configure Virus?

Configure Virus, also known as Downup, Downadup and Kido, is a computer worm that surfaced in October 2008 and targets the Microsoft Windows operating system. The worm exploits a known vulnerability in the Windows Server service used by Windows 2000, Windows XP, Windows Vista, Windows Server 2003, Windows Server 2008, and the Windows 7 Beta.

The Configure worm, sometimes called Downadup or Kido has managed to infect a large number of computers. Specifics are hard to come by, but some researchers estimate that millions of computers have been infected with this threat since January.   Illustrating the concern about this virus, Microsoft has just put out a $250,000 reward for information leading to the arrest and conviction of those responsible for launching the Configure worm.

What does the Configure worm do?

We don’t know the purpose of the Configure worm. Today the worm has created an infrastructure that the creators of the worm can use to remotely install software on infected machines. What will that software do? We don’t know. Most likely the worm will be used to create a botnet that will be rented out to criminals who want to send SPAM, steal IDs and direct users to online scams and phishing sites.

The Configure worm mostly spreads across networks. If it finds a vulnerable computer, it turns off the automatic backup service, deletes previous restore points, disables many security services, blocks access to a number of security web sites and opens infected machines to receive additional programs from the malware’s creator. The worm then tries to spread itself to other computers on the same network.

When executed on a computer, Configure Virus disables a number of system services such as Windows Automatic Update, Windows Security Center, Windows Defender and Windows Error Reporting.  It receives further instructions by connecting to a server. The instructions it receives may include to propagate, gather personal information and to download and install additional malware onto your computer. The worm also attaches itself to certain Windows processes such as svchost.exe, explorer.exe and services.exe.

How does the worm infect a computer?

The Downadup worm tries to take advantage of a problem with Windows (a vulnerability) called MS08-067 to quietly install itself. Users who automatically receive updates from Microsoft are already protected from this. The worm also tries to spread by copying itself into shared folders on networks and by infecting USB devices such as memory sticks.

Who is at risk?

Users whose computers are not configured to receive patches and updates from Microsoft and who are not running an up to date antivirus product are most at risk. Users who do not have a genuine version of Windows from Microsoft are most at risk since pirated system usually cannot get Microsoft updates and patches.

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically to your feed reader.

Comments

How on earth, when infected by this horrific conficker worm, are we supposed to download a free antivirus (so as not to expose a credit card or bank access) when even the safe and free downloads like Norton require a credit card.

Leave a comment

(required)

(required)