Presentation is loading. Please wait.

Presentation is loading. Please wait.

SIM303. “ The Conficker worm is a computer worm that can infect your computer and spread itself to other computers across a network automatically,

Similar presentations


Presentation on theme: "SIM303. “ The Conficker worm is a computer worm that can infect your computer and spread itself to other computers across a network automatically,"— Presentation transcript:

1 SIM303

2

3

4

5 “ The Conficker worm is a computer worm that can infect your computer and spread itself to other computers across a network automatically, without human interaction.” http://www.microsoft.com/security/worms/conficker.aspx#EWC

6

7

8

9

10 THE CIO PANICS!

11

12

13

14

15

16

17

18

19

20 Usernames will be used as a form of guessing a password, for example, if James is logged on the payload will try james123 123james or the letters jumbled up. The first attack will be on the internal network, then out to the public IP’s however there is a blacklist!! That it will not try. Which is interesting. The worm will not attempt to attack AV company IP addresses, it will generate random domain names.

21

22 The worm modifies the following registry key to create a randomly named service on the affected system:

23

24 The MMPC – Your friend in Protection

25 You are logged on to a machine as a Domain Administrator with an account that has a weak password and you have an infected USB Pen drive inserted, this will almost guarantee Conficker will spread !

26

27

28

29

30

31 customer

32

33 FosterGreenHospital KnockbrackenHealthcarePark

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51 The Conficker eye chart http://www.confickerworkinggroup.org/

52

53 Just Kidding

54

55

56

57 www.microsoft.com/teched Sessions On-Demand & CommunityMicrosoft Certification & Training Resources Resources for IT ProfessionalsResources for Developers www.microsoft.com/learning http://microsoft.com/technet http://microsoft.com/msdn http://northamerica.msteched.com Connect. Share. Discuss.

58

59 Scan the Tag to evaluate this session now on myTechEd Mobile

60

61


Download ppt "SIM303. “ The Conficker worm is a computer worm that can infect your computer and spread itself to other computers across a network automatically,"

Similar presentations


Ads by Google