Thank you for that remider!

If anyone has had internet problems "fixed" by making phone calls and them doing a "test"..yep..they are remotely going into your computer.

I just had to unclick mine again.

Thanks Muwah! I too, just went in and took care of the remote access.

You are a jean-you-us!

Thanks Moi....

We just did our laptop and this one.
The laptop had two choices..which was confusing. So we unclicked both.
It is newer than this machine.

Thanks Moi! I unclicked mine.

I'm on my Linux OS laptop right now and don't have anything important on it.
I don't know if this problem would even affect a linux based computer haven't searched on that, cause I can just wipe and reinstall if needed.

On my desktop - I am updating
xp from Microsoft
my zone alarm Internet Security suite - changed settings to deep scan and changed a few things to a higher level for awhile.

you might consider changing any settings to a higher level of security if you are comfortable doing it.

possibly turn off computer or lock down Internet when not using it.
you could also turn off your modem when not in use.
one problem with having 2 computers at the same desk is I keep typing or grabbing the wrong mouse or keyboard LOL.

OK....chicken little me is running away from worm! I will PRAY for all our PC's to survive, I will pray for each one of us to get thru the next week without....sobbing....all you GREAT people! See ya'll next week, If I can stay away! Doubtful.....

How CRUEL to do this to everyones lifes! Like there isn't enough stress out there already! as my Daughter would say...Fiddlestix & poppycok! I would say Much more than that,,but I'm a lady..I would say those words that come flying out of ones mouth AFTER they SLAM their toe! lolol...sorry, just amusing myself..Peace!

you're welcome, ladies.

~~~~~~~~~~~~~~~~~

I am a bit worked up about this particular worm because it has wreaked
havoc with some of the folks' puters that I've been trouble shooting.

and when it hit my high tech friend, I knew I had better take an even deeper look at it...

the main purpose of this worm IS to make money. It wants your puter to WORK and be on line. So it really doesn't disable you. What it wants to do, is to steal all your personal information and all your passwords. That's the scary part.

maybe this would also be a good time to discuss on what IF our puters are infected by this worm.

~~~~~~~~~~

if we all made sure that everything is up to date and we still get this bug.

The very first thing to do is to DISCONNECT your puter from the internet. Unplug it from the modem or turn off your wi-fi

provided that your anti-virus/spywares are up to date. Run the anti-virus scanner first, then the anti-spyware.

restart. Run them again.

Some of the anti-spyware might have to be run in the safe mode if you are not able to get it all in one shot.

the other thing to remember is that this worm can embed itself and grow.

Catching it the first time or even the second time might not mean that it's gone. (and we also have to remember there are many variants of
this worm. A, B, B++ and the eventual "C" (or variant 3)

I would run it at least three times with at least once in safe mode.

~~~~~~~~~~

this website provided by MS has the latest variant removal. It is free.

I would download it to the desktop and keep it there. (and NOT wait until you're infected for you might not be able to download it)

And if one was to get the infection. Run all your anti-virus and spyware first. Then run this tool.

Go to the site and click on download.

Don't click on "Run" but click on "SAVE"

save it to a location where you can find it. (I prefer to save it to my desktop)

*one thing to remember, this does NOT catch all the variants of the worm. But it'll help catch those that your anti-virus/spy doesn't catch but still might NOT catch all of it. And it is ONLY a supplement.


~~~~~~~~~~

After you're sure your puter is cleaned up. Change ALL your passwords.

This worm is a mirror and a keystroke tracker.

meaning that if you go to your bank site. The hacker can see exactly what you're seeing.

And whatever you type in, the hacker can track your keystroke. Even back space.

So, the best bet is to change the passwords. (After you're sure that you are NOT infected)

Now, you may ask, even if I just got it a minute ago?

The problem is, at the time of detection, it might have been in your puter for a period of time. And let's say
you were trying to log in to your bank account around that time. It could've gotten those keystrokes by then.

Although unlikely, always better safe than sorry.

the other thing to be aware of is if you are on a network in your home. Check to see if other computers are infected as well.

~~~~~~~~~~~

if all else fails or if you think you did catch all of it but your puter is still infected. It might be that you
have to reformat.

Unfortunately, just from what I've trouble shooted and from what my friend told me. The % is high for reformatting....

so backing the files would be my hortatory opinion/advice.

~~~~~~~~~

if anyone gets really bored and want to read up on the tech aspects of the previous versions and what they suspect in the new version.

click here....

but be forewarned, it's tech talk and you might fall asleep reading it. LOL

stay safe, everyone.

ugg -
I've been updating, scanning , tweaking and cleaning my desktop all day and tomorrow I go work on my parents pc... at least they have a lot less stuff on theirs since I just built it in January.

I'll scan more in the morning with malwarebytes and then do a full back up.

Moi, thanks for the details and all the help

My Zone Alarm has settings to lock down the internet access to all programs so I have that set up after 10 minutes of no use it locks it.

But I will be turning off the dsl modem too when we aren't using it.

Jo, how do you set the internet to go down after so many minutes? Twinks heard it is safe for Vista users but I think I'll still stay off on the 1st.

Our IT guy at work said that the basic security advice is to update windows, keep you AV on and updated.

Only computers user that should concerned should be the ones already infected and have already part of the botnet. For the rest of us not infected, keep windows fully patched and updated and do the same with your antivirus security software. We do access our work computers remotely and he is going to shut that down for 2 days to be on the safe side.

The conflictor bot net may be more of a publicity media event than anything else - as far as most home users are concerned.

http://news.cnet.com/faq-conficker-t...t-expect-boom/

But just to be sure, I use McAfee and I'm going to lock down my firewall before I go to work because I leave my computer on all the time.