Detecting Conficker Worm Activity With The LANGuardian

[cem719]

check norton wire shark is a worm and a trojan

[trueplaya3651]

can the conficker worm knows your credidted card nuber and stuff please reply /?

[WilliamUzumaki99]

@trueplaya3651 It won't know, it will STEAL.

[aimboter89]

thx 4 d info, wire shark is a software tat shows wat website i accessing rite?

is it harmful?

[NetfortTechnologies]

Wireshark can be used to show what connections your computer makes. Lots of people use this application and Microsoft also have a similar free product called Microsoft Network Monitor

[aimboter89]

What kind of symptoms if my pc is infected by that conficker c worm?

[NetfortTechnologies]

You wont notice too much when you use the computer. However if you have a network analysis system in place you may see the computer trying to access websites known to be associated with Conficker. Take a look at Wireshark, a free application which shows you what connections your computer is making

[iGangstur]

Does the conficker worm affect Canada?

[NetfortTechnologies]

Yes, I can affect computers anywhere. However we did read an article where it mentioned that the worm checks the keyboard language. If it is set to Ukrainian then it wont infect the computer.

[seanw23]

without latest updates, can we still take this thing down? get rid of it on our comp?

[NetfortTechnologies]

Our recommendation is that you patch your systems using the latest updates as its has been good policy with MS products for years now. Also consider some sort of network monitoring system at the core or at the Internet gateway

[Ziz208]

are windows based firewalls such as Windows Defender Bugged due to the virus and its ability to surpass windows security well?

[NetfortTechnologies]

Client based firewalls like Windows Firewall will have problems as the worm spreads locally over Microsoft Ports (TCP 445, 139) and this is used for lots of services so client firewalls allow the communications. The worm 'phones home' over web (TCP port 80) and again this is normally allowed through client based firewalls. The suspicious activity is the amount of connections the worm will establish on your network and attempts to access external websites which is a huge list with Conficker.C