# Information, tools, and signatures around the Conficker computer worm

**github.com/tillmannw/cnfckr**

tillmannw

This repository contains information around the Conficker computer worm, as well as
signatures to detect it and code to remediate infections.

The `signatures folder contains YARA rules to detect unpacked variants of the worm`
in memory and Snort rules to detect exploitation attempts in a network.
the `samples folder contains unpacked versions of each Conficker generation for`
reference. They contain malicious code - handle with care.

The data in this repository is (C) 2008-2018 by Tillmann Werner


-----