Many PCs still not patched against Conficker vulnerability

Scott Lewis in our Columbus office has been doing some number crunching, and come up with some disturbing statistics after examining the data produced by Sophos's free endpoint assessment test.

The Sophos Endpoint Assessment Test is a free tool that scans a computer and assesses whether it is a security risk to your organization. A single scan checks that your Microsoft service pack is the current one for your operating system, your Microsoft patches are all up to date, anti-virus protection is installed, running and current, and that a personal firewall is installed and running.

Scott examined the results for all users who took the test since January 1st 2009 to date, and found that 11% of the users did not have the Microsoft MS08-067 patch installed which can, amongst other things, help protect against the spread of Conficker.

Scott assumed that over time the percentage would drop dramatically due to the huge amount of press and publicity regarding Conficker in the last few months. However, his assumption appears to have been incorrect.
Continue reading here....