W32 Conficker.dv worm- remove virus cinficker worm manually

On 04/01/2009 10:46 PM, dfinc sent:

***URL REMOVED***

McAfee SiteAdvisor gives this site a red flag warning!

A much safer resource below will let you choose from 10 vetted solutions:

Do your homework and don't be misled by those who might profit from your inexperience or carelessness!

Pete

Removal tools are no solution to an infection, particularly not with malware that may download more malware or may give an attacker remote access. One can never be sure what else was modified on the system and thus can never be certain that the malware was removed entirely.

cu

59cobalt

Hello:

Although as a /generality/ this *may* be true, particularly with complex infestations. However, Microsoft themselves encourages the use of their MRT as an accepted remediation practice for Conficker. You're *NOT* wrong. But in this case though, flatten & rebuild is overkill.

My $0.02USD

Pete

Is it? The system could have been infected with a different (not yet known to the public) Conficker variant. It could be infected with other (undetected) malware on top of that. Unless you are really, absolutely,

100% sure that the infection was with Conficker.X, only Conficker.X and nothing but Conficker.X, your only safe way back to a clean system is to flatten and rebuild.

Microsoft can recommend their removal tool all day long, that doesn't change anything at all about the fact that all of these tools make the assumption that the compromised system is infected with nothing but what they detected. An assumption that may be right, but may just as well be wrong.

cu

59cobalt

How do you then regain trust in a system that is infected with something you don't fully understand and "cleaned" by something you don't fully know what does?

Wipe it and rebuild it in a clean environment, that's the only way I would trust the computer again.

conficker has now gone underground