Firewall Alert for Virus ! - Page 2

Originally posted by: hardik_kansagra

i know what you says but there's no need to add security patches cause in mine one i have microsoft windows vista service pack 2(OEM Addition) With all Security Patches In My Dell Leptop And Stil I Am Receiving This Alerts Here Are The Pictures.

Picture 1 :

Picture 2(While Pressed View Detail Link In Alert) :

Frequency Of Message : Each 10 Minit While Surfing(Not Just India-Forums But At All Sites).

And I Do Not Think That Norton Is Bed Software Cause Norton internet Security, McAfee, Quick Heal,AVG, Kaspersky Internet Security Are The Top 5 High Reated Softwares For Protection To Virus And Hack Attacks.

By

Hardik Kansagra

Originally posted by: ishan.k

Screen Shots of my Alerts !!

Originally posted by: vijay

Hey can you let me know where you got this alert as this is coming through some "GIF" file ddfapey.gif

So if you can tell me more about it may be I can find the source of the problem.

Cheers,
Vijay

The downloaded files usually have the following file extensions:

.BMP
.GIF
.PNG
.JPG

So either your system is compromised or its trying to download the file from one of those affected systems. So lets find more about it.

BTW do you know Microsoft has put an award of 5 Million dollars to the person who helps in finding the author or group who is spreading this worm. 😊

Originally posted by: vijay

Hey can you let me know where you got this alert as this is coming through some "GIF" file ddfapey.gif

So if you can tell me more about it may be I can find the source of the problem.

Cheers,
Vijay

Originally posted by: vijay

On further studying more about this particular worm:

Win32/Conficker.B starts an HTTP server on the affected system by opening a random port, shown below. This allows a copy of the worm to be downloaded by systems vulnerable to MS08-067.

The downloaded files usually have the following file extensions:

.BMP
.GIF
.PNG
.JPG

So either your system is compromised or its trying to download the file from one of those affected systems. So lets find more about it.

BTW do you know Microsoft has put an award of 5 Million dollars to the person who helps in finding the author or group who is spreading this worm. 😊

Originally posted by: ishan.k

Screen Shots of my Alerts !!

Originally posted by: vijay

Well on further checking I feel that this is NOT coming from any website cause:

Your alert shows that its trying to download the file in the following Folder:

C:\Documents and Settings\Network Service

Where as all the temporary internet files are normally stored in:

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\


And normally this particulr Worm spreads through LAN using ill formatted RPC calls or USB Drives (through autorun.inf)

Hope this helps you find more about the same.

Regards,
Vijay

Originally posted by: vijay

On McAfee site they are reporting Global Threat Condition to : Critical

Which means:

Systems worldwide are being widely targeted, or may become widely targeted by an active and available exploit or threat. An extreme global security incident is taking or may imminently take place.

And this is affecting a lot of people using "Internet Explorer"

Microsoft has today released a very "Critical Update" which you should not ignore and install it immediately.

https://www.microsoft.com/technet/security/Bulletin/MS10-002.mspx

This security update resolves seven privately reported vulnerabilities and one publicly disclosed vulnerability in Internet Explorer. The more severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Be safe!