Win32: Confi [Wrm]

Viruses and worms
1

I do not find this in the Virus DB for Avast? I thought this problem was solved.

2

Win32:Confi is known as the Conficker/Downandup/Kido worm.

http://www.ca.com/securityadvisor/virusinfo/virus.aspx?id=75911

The Conficker worm exploits the MS08-067 vulnerability in order to spread. It may also download and execute various files. It also attempts to access pre-computer domain names.

The Conficker removal tool can be found here.

3

Yes, but what about Avast as detection and removal? I was reading about this worm in this forum and it appeared to be resolved. Yet it is not in the Virus Database.

4

From a different poster on here avast! is aparently able to detect and remove this worm via the Boot Scan option if you want to read more about it though heres a link to the topic

http://forum.avast.com/index.php?topic=41598.0

5

Here is a solution: http://www.us-cert.gov/cas/techalerts/TA09-020A.html

6

Win32:Confi [Wrm] detection is in our VPS… http://avast.com/eng/vps_history.html - 6.1. 2009