Re: [foxboro] "Conficker" virus,

-----Original Message-----
From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] On 
Behalf Of Toecker, Michael
Sent: Monday, June 15, 2009 10:25 AM
To: foxboro@xxxxxxxxxxxxx
Subject: Re: [foxboro] "Conficker" virus,


...which also begs the question why your process control systems have access to 
the internet...

I haven't done a Conficker detection on a foxboro system yet.  Most of the ones 
available require that you:
1.  Use their product
2.  Currently RUN their product on the system 3.  Can connect to the internet 
or an AV system for updates.

I've had a decent amount of success with Microsoft's removal tool (Windows 
Malicious Software Removal Tool) on other Windows based DCS.
You can download it from their website.  It has all the files "onboard"
to detect and remove conficker, you don't have to connect to the internet for 
updates.

AND!  All of this is for NAUGHT if you don't PATCH YOUR SYSTEM.  If you remove 
it, and other systems are infected, you are likely to be reinfected within 
minutes of removing the virus.  I'm not sure if Foxboro has released an 
approved system patch and patch procedure for Conficker...

You should perform this on an isolated test system before trying it in 
production to get a feel for what is gonna happen (such as required reboots).  
And, since I'm not the one doing the removal, proceed under your own risk.

Sincerely,
 
Michael Toecker
Control Systems Security Designer
Compliance & Infrastructure Protection
Burns & McDonnell Engineering

-----Original Message-----
From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx]
On Behalf Of Mike_Adams@xxxxxxxxxxxxx
Sent: Monday, June 15, 2009 10:54 AM
To: foxboro@xxxxxxxxxxxxx
Subject: Re: [foxboro] "Conficker" virus,

According to Symantec, if you are able to access the following link on your 
browser, the machine does not have Conficker:

http://www.symantec.com/norton/theme.jsp?themeid=conficker_worm

That page has additional content on the Conficker issue.

Mike Adams
Mitsubishi Polyester Film, LLC
Greer, SC USA
864-879-5231




 

             "Murphy, Ronald

             T"

             <Ronald.Murphy@XC
To 
             ELENERGY.COM>             "foxboro@xxxxxxxxxxxxx"

             Sent by:                  <foxboro@xxxxxxxxxxxxx>

             foxboro-bounce@fr
cc 
             eelists.org

 
Subject 
                                       [foxboro] "Conficker" virus,

             06/15/2009 11:49

             AM

 

 

             Please respond to

             foxboro@freelists

                   .org

 

 





We have been notified by management to make sure the conficker virus is not 
present on our DCS system.
So I was curious if anyone has used the McAfee conficker virus detection 
software on I/A v8.3 boxes?  If so were there any problems?  Also does anyone 
know if Foxboro came out with a support statement for the McAfee conficker 
virus detection software?
Thanks for your help in advance,
Ron Murphy


_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process Systems 
(formerly The Foxboro Company). Use the info you obtain here at your own risks. 
Read http://www.thecassandraproject.org/disclaimer.html

foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave



 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process Systems 
(formerly The Foxboro Company). Use the info you obtain here at your own risks. 
Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
 
 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process Systems 
(formerly The Foxboro Company). Use the info you obtain here at your own risks. 
Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
 
 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave

Other related posts: