Home / malware

PDF

Worm:Win32/Conficker.B!inf

First posted on 13 April 2017.
Source: Microsoft

Aliases :

There are no other names known for Worm:Win32/Conficker.B!inf.

Explanation :

Installation

Worm:Win32/Conficker.B!inf is the detection used for the autorun.inf files created by Conficker.B when it attempts to spread through mapped and removable drives.

For more information, please see the Worm:Win32/Conficker.B.

Worm:Win32/Conficker.B is a worm that infects other computers across a network by exploiting a vulnerability in the Windows Server service (SVCHOST.EXE).

Payload

If the vulnerability is successfully exploited, it could allow remote code execution when file sharing is enabled.

It can also spread through removable drives and weak administrator passwords. It disables several important system services and security products.

Last update 13 April 2017

 

TOP