[nsp-sec] Conficker Remediation Effort

[Barry Greene]

Hi Team,

Jose, Don, and I are helping on the Conficker Working Group. As part of
the "fight" against Conficker, we using some techniques that we all
know. The attached document list out a brief description of what the
Conficker Working Group is trying to achieve along with offers to get
based ASN reports on Conficker infected machines.

Please look through the resources from Arbor Networks,
Shawdowserver.org, and Team CYMRU to insure the ASN reports are working
for you. 

This document is not confidential, but as mentioned, clueing in the bad
guys would warrant discretion. The intent of the document is for it to
be used inside your organizations, so it is A-OK to pass to your team,
your boss, your boss's boss, etc. 

If you have any questions, please ping Jose, Don, or I. We're on-line
and on the NSP-SEC sIRC channel.

Thanks,

Barry


Barry Raveendran Greene
Director, Juniper Security Incident Response Team (SIRT)

Tel (Office): +1 408 936-6887
Tel (Cell): +1 408 218-4669
E-mail: bgreene at juniper.net
! 
Chat Locations:
AIM: Barry R Greene
MSN: BarryRGreene
Yahoo: BarryRGreene
Skype: barrygreene
Jabber: barryrgreene at jabber.tisf.net
MSN: BarryRGreene at hotmail.com

PGP: 0x16BF45F3