Security Alert: Downadup worm infections

Enterprise Information Technology Services Press Release
The University of Georgia
Athens, Georgia

Tuesday, January 20, 2009

WRITER: Ben Myers, 706-542-0033, bmyers@uga.edu
CONTACT: EITS Help Desk,706-542-3106, helpdesk@uga.edu

ATHENS, Ga.— The EITS Office of Information Security advises all Windows users to be on the lookout for the Downadup (aka Conficker) worm.

Downadup is a worm that spreads through malicious local network and Internet traffic that exploits a vulnerability in the Microsoft Windows Server service. (The Microsoft Windows Server service provides support for sharing resources such as files and print services over the network.)

No user action is necessary for infection. Any computer connected to a network and/or the Internet with the Server service vulnerability is at risk.

The Downadup worm exploits a Windows vulnerability that was fixed in an out-of-cycle patch in October (KB 958644); therefore, up-to-date machines will not be vulnerable to the Downadup worm infection.

The following Web sites contain important information regarding detection and removal of this worm for non-patched Windows computers:

Microsoft Virus Alert for Downadup/Conflicker
Symptoms, propogation methods, and related information.

F-Secure's Removal Tool
This tool should be used in addition to the Microsoft Malicious Software Removal Tool (below).

Microsoft Malicious Software Removal Tool
Note: This tool is released every Tuesday and provides cumulative detection/removal capabilities. It will detect and remove other viruses, trojans, worms, etc., in addition to the Downadup worm.

The Office of Information Security distributes F-Secure—a free, site-licensed anti-virus package—to UGA students, faculty, and staff. See the F-Secure download page for more information.

About the Office of the CIO and EITS
The Office of the Chief Information Officer and Enterprise Information Technology Services (EITS) are committed to the mission of UGA as a land-and-sea-grant institution where academics come first and the research extensive university community encourages research efforts at the undergraduate and graduate levels. To that end, under the direction of the University´s Chief Information Officer, EITS endeavors to provide a robust, reliable, and secure information technology infrastructure, maintain essential production services, and offer world-class support.

Search EITS