In general, if you have a fully patched system, your computer should not get compromised. However, make sure you have firewall and anti-virus programs installed and properly configured.

If you have been neglecting to patch your computer (the security bulletin that’s important here is MS08-067) then there is chance that you could be infected.

Please check your computers and make sure none of them are affected. One telltale symptom of infection, is the inability to connected to the MicroSoft Update Page or most anti-virus vendor pages.

Run a system scan using one of the following tools:

• Sophos
• Kaspersky
• F-Secure Malware Removal Tool
• McAfee
• Microsoft Malicious Software Removal Tool
• Sunbelt Software
• AhnLab
• ESET
• Symantec FixDownadup.exe
• TrendMicro

As mentioned, if you have trouble accessing any of the above links then that could be an indicator that your computer is infected because Conficker incorporates a domain blocker to prevent infected users from getting help. It is important that you use an uninfected PC to download a Conficker removal tool onto a removable drive (eg. USB drive) and clean up the infected PC.

If you find a computer that has been compromised:

1. Immediately disconnect it from the network.
2. Let the ITstaff know the IP address of the computer.
3. Take steps to fix the computer.
4. When you are absolutely sure the computer is clean, notify the ITstaff as to exactly what steps you have taken and if they are satisfied they will re-connect it to the network.

After removing the worm,

1. Be sure to apply the (MS08-067) patch to ensure you don't get hit again. The quickest way to do this is by visiting the Microsoft update site.
2. Make sure you have up-to-date anti-virus and firewall protection enabled and properly configured.

Please contact one of the IT staff if you need more information or assistance.