Win32/Conficker Variants Update

Thursday, April 09, 2009 6:53 PM

There have been new developments in the Conficker arena within the past couple of days. We would like to inform those who are concerned that the MMPC is working to make sure you have the information you need, first to be protected from any threat; and second, to provide you with a full understanding of the threat itself.

http://blogs.technet.com/mmpc/archive/2009/04/09/win32-conficker-variants-update.aspx

Cashing in on Conficker's Bad Name
Thursday, April 09, 2009 1:25 PM

Over the last couple of days we've seen some spam claiming to be from Microsoft, providing a free scan to remove Conficker. Here's an example:

The link actually takes you to a typical fake online scanner page used to serve up a rogue security scanner:

In this case the page tries to get you to download TrojanDownloader:Win32/Renos.HL which in turn installs the rogue Trojan:Win32/WinSpywareProtect. You can read tips on how to recognize and avoid fraudulent e-mail.
–Hamish O'Dea

http://blogs.technet.com/mmpc/archive/2009/04/09/cashing-in-on-confickers-bad-name.aspx