Conficker (W32.Downadup.B)

Analisa tentang conficker (W32.Downadup.B)

Terdiri dari file-file dibawah ini

1. fbkkpi.bfu ada di folder %SystemRoot%system32

2. wtbsfb[1].bmp file ini hanya contoh, biasanya acak (random), ada di folder Documents and SettingsDefault UserLocal SettingsTemp


3. x akan terbentuk di folder %SystemRoot%system32 atau di %SystemRoot%

3. Pada control panelscheduled tasks

http://images.sikathabis.multiply.com/image/AP5kKk55NyRm3T1VhS7g6g/photos/1M/300x300/2799/conficker-b-AT1.JPG?et=qBCt4p1xx8qPavXeQmGH0A&nmid=0

Kesimpulan, delete task At1 s/d At-n (jika ada)


Jangan lupa ditutup port-port netbios, DCOM dll, menggunakan wwdc (ziddu | rapidshare)
caranya jika ada tanda silang warna merah, click tombolnya, di DCOM, RPC, Netbios atau UPNP dan SSDP-nya


sekian tips dari sikathabis

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: