About 'Conficker Detection' By The Firewall

[stimulator32]

Hello,

as long as the worm is detected by the 'Web Access Protection' module -it disconnects the connection before the worm access PC-, why that detection was added to the personal firewall?

Many Thanks ..

[agoretsky]

Hello,

Some malware, such as the Win32/Conficker worm, spread themselves by using specially-crafted packets designed to attack vulnerabilities in an operating system, service or application bound to an open port. Because these attacks can be identified on a per-packet basis (as opposed to looking at the data stream from a file transfer--the attack can be blocked by IDS functionality in the firewall.

Regards,

Aryeh Goretsky

[stimulator32]

Many thanks Aryeh ..