Waking up today I read news about this Flamer Virus how it got through WIndows Security Update and passed itself off as a real update. So now im scared out of my wits thinking I updated it but the log says I did updates May 12th, 20th and June 4th. So now im thinking the very small June 4th Update could have erased the update with the virus. But regardless I think I have been hit and was wondering how to check if I was and/or still have it. Please help me calm my nerves.
The virus did not get distributed by Microsoft's update services.
What happened is that components of the virus somehow acquired the same certificate authority signing that Microsoft uses to authorized Terminal Services Licensing, so when somebody viewed that component, it would appear as though it was a piece of software signed by Microsoft. The virus itself still needs to be downloaded or transferred to your computer by way of it's documented distribution methods.
also, while the virus can be transmitted through Windows Update, this specific transmission method only works if there is another compromised computer spoofing the Update. are you on a business network? are there any other computers on your home LAN?
there are a ton of free antivirus programs out there; install one and run a full scan of your PC. some, of course, are more reputable than others (and some are actually malware programs masquerading as antivirus software). but here are a few reputable ones:
Pretty much this. Have there even been any reported infections outside the middle east? It's a virus desgined to delete sensitive Iranian data, it isn't after the average home user.
Posts
The virus did not get distributed by Microsoft's update services.
What happened is that components of the virus somehow acquired the same certificate authority signing that Microsoft uses to authorized Terminal Services Licensing, so when somebody viewed that component, it would appear as though it was a piece of software signed by Microsoft. The virus itself still needs to be downloaded or transferred to your computer by way of it's documented distribution methods.
also, while the virus can be transmitted through Windows Update, this specific transmission method only works if there is another compromised computer spoofing the Update. are you on a business network? are there any other computers on your home LAN?
there are a ton of free antivirus programs out there; install one and run a full scan of your PC. some, of course, are more reputable than others (and some are actually malware programs masquerading as antivirus software). but here are a few reputable ones:
http://free.avg.com/us-en/homepage
http://www.avira.com/en/avira-free-antivirus
http://windows.microsoft.com/en-US/windows/products/security-essentials
steam | Dokkan: 868846562
Pretty much this. Have there even been any reported infections outside the middle east? It's a virus desgined to delete sensitive Iranian data, it isn't after the average home user.