Fake Microsoft Updates Invoke Conficker

Exactly one year after infection of the Conficker worm began spreading like wildfire, Malware distributers are still trying to capitalize on public knowledge of this infection. Back in November of 2008, countless organizations took notice as news of the Conficker worm soared in popularity (including public school networks and US military systems as they, too, found Conficker on machines).
Today we are seeing a slew of fake “Microsoft update” emails that are pretending to be a warning that your “ISP has detected that you network has been infected” with the Conficker worm. The attached file (3YMH6JJY.zip) is supposed to be a courtesy of Microsoft that will clean the malware from your machine. In reality the file contains a Trojan the serves to do just the opposite. Here is a look at the message: