Free Version and Conficker

[betolley]

Should 5.0.0.1 version of PC Tools AntiVIrus detect the Conficker virus? I have a copy of the file that infects (I took from another lab computer) and pc tools did not detect the file. I unplugged the system from the network and infected it(I am an admin it is ok...I just formatted it after).

Thanks,
Bruce Tolley

[mjq424]

Hi
PC Tools AntiVirus should detect this threat. You may have a newer variant that isn't in the database yet. Please submit the file to the PC Tools Malware Research Lab here (http://www.pctools.com/mrc/submit/). Also, have you tried the latest version of PC Tools AntiVirus, version 5.0.1.1 (http://www.pctools.com/forum/showthread.php?t=55768)? This may detected the threat better if it is packed.
Hope that helps

[betolley]

Antivir found them as:

win32:trojan-gen
bv:autorun-g

I submitted them. Any idea when they might show up as part of the database? I have Alot of systems infected not with conficker but with the trojan that is trying to download it.

Thanks,
Bruce Tolley

[mjq424]

Hi
I'm not sure how long it will take. You could try emailing the support team on support@pctools.com.
Hope that helps

[betolley]

Conficker is getting as a dll started by rundll32.exe. PCtools does not detect the dll just scann the rundll32.exe. Is there a way around it?

[haapy]

If the rundll32.dll is in your startups, disable or remove it.

And check this article out

http://windowssecrets.com/2009/01/22/02-Keep-the-latest-worm-infestation-off-your-PC

[betolley]

I am not talking about 1 computer but several labs.

[AChen]

Can you send me your email address via Pm so we can locate the samples you have submitted.
Please note that there are many many variants of the Conficker virus.

[haapy]

Bruce,

Here is an article that may be of interest to you:

http://windowssecrets.com/2009/01/22/02-Keep-the-latest-worm-infestation-off-your-PC