[4eyes] [Fwd: Re: [COMS #28641] [UCSB-OIT #165624] 128.111.28.95 Infected With Conficker]

[Tobias Hollerer]

Folks,

We have a computer in the ilab trailer, using (at one point)
DHCP-assigned address 128.111.28.95 (ilab-95.cs...), which
has apparently been infected with the Conficker worm.
This could be a computer in the trailer (unlikely), a laptop
that you used the wall ethernet for, or an outside computer
that connected via VPN.

Everyone, please check the IP addresses of your computers,
but also, if you have VPN'd in recently, check those machines.
"Windows NT 5.1" means that the machine in question has XP on
it.

Let me know ASAP and please delete the worm!!!
Thanks,

	Tobias


-- 
Tobias Hollerer
Associate Professor, Department of Computer Science
University of California, Santa Barbara, CA 93106-5110

holl at cs.ucsb.edu, Office: (805)893-8759, Fax: (805)893-8553
-------------- next part --------------
An embedded message was scrubbed...
From: "Matthew Turk" <mturk at cs.ucsb.edu>
Subject: RE: [COMS #28641] 	[UCSB-OIT #165624] 128.111.28.95 Infected With Conficker
Date: Fri, 9 Oct 2009 16:15:38 -0700
Size: 10271
URL: <https://lists.cs.ucsb.edu/pipermail/ilab-users/attachments/20091009/f4cfb078/attachment-0001.eml>