« Back to blog

Worried about conficker virus? You shouldnt be if you're using OpenDNS

There's a lot of media / hype going around about the "Conficker" virus.   I have been asked at least 30 or 40 times in the past day on what people need to do in order to make sure they do not have the conficker virus.

A majority of my clients use OpenDNS.   And if you are, OpenDNS is automatically blocking the websites the conficker viruses uses to reach out and download instructions on what to do next.   Here is a blog post directly from the OpenDNS website, which explains it in more detail:

http://blog.opendns.com/2009/03/30/worried-about-conficker-on-april-1-setting-up-opendns-can-protect-your-network/

OpenDNS will continue to identify the domains, all 50,000, and block them from resolving for all OpenDNS users. This means even if the virus has penetrated machines on your network, its rendered useless because it cannot connect back to the botnet. If you want to disinfect your computer we recommend you check out the tools from our friends over at Kaspersky Lab.  If you’re already using OpenDNS, you’re all set. We’re protecting you automatically. If you’re not yet, simply set up a free account here and secure your network.

 

Additionally, if you have ran Windows Update or if your workstation has automatically gets the updates from your company's server via windows update services (WSUS), and this has happend in the past month or two, you should be good to go.   Microsoft released a security patch some time ago that resolves the exploit the conficker virus uses.

If you do have the conficker virus, you can also remove it using one of the removal tools below:

Symantec

Kapersky

TrendMicro

Microsoft Malicious Software Removal Tool

McAffee

 

Make sure to turn system restore OFF before using the utilities.

 

-philip