Friday, April 24, 2009

W32/Conficker.worm

This time I am with a fix for a new virus - W32/Conficker.worm

Now this one was with the testing team laptop (Not mine, fortunately and believe me, I am in no way involved in spreading it either).

The symptom was the following:
The McAfee scan used to pop up a message quite frequently blocking svchost.exe saying there was a buffer overflow and svchost.exe gets blocked.[svchost.exe Kernel LoadstringA() used to give the buffer overflow]

The system was having Windows XP SP2 installed in it. Google search gave the info that this was the W32/Conficker.worm malware. A security patch has been provided by Microsoft for fixing this issue.

This is the link:
http://www.microsoft.com/technet/security/bulletin/ms06-040.mspx

If you have SP3, then no worries, the fix should already be there!

Will update this link if issue still persists :) I am looking forward for more viruses ;)

No comments: