Conficker virus has awoken, causing problems (see page 6, solewoman's post)

30,428
5,478
Joined
Jul 16, 2002
nerd.gif
 
(CNN) -- Remember the dire predictions surrounding the "millennium bug?" The doom-and-gloom scenarios bandied about by security analysts on how computers could act when their clocks turned to January 1, 2000?

Computer users will not know that Conficker.c has infected their machine.

corner_wire_BL.gif


Well, researchers are hoping that a potential April Fool's time bomb -- the Conficker.c that is supposed to hit computers on April 1 -- turns out to be equally unfounded.

But realizing that hope alone is not a prudent option, here is a primer on the worm so you can adequately prepare yourself -- and your computer.

What is Conficker.c and what do analysts fear it may do?

Conficker.c is a worm, a malicious program thought to have already infected between 5 million and 10 million computers.

Those infections haven't spawned many symptoms, but on April 1 a master computer is scheduled to gain control of these zombie machines, said Don DeBolt, director of threat research for CA, a New York-based IT and software company.

What happens on April Fool's Day is anyone's guess.

The program could delete all of the files on a person's computer, use zombie PCs -- those controlled by a master -- to overwhelm and shut down Web sites or monitor a person's keyboard strokes to collect private information like passwords or bank account information, experts said.

More likely, though, said DeBolt, the virus may try to get computer users to buy fake software or spend money on other phony products.

Experts said computer hackers largely have moved away from showboating and causing random trouble. They now usually try to make money off their viral programs.
video.gif
Watch more on the worm »

How does the Conficker.c work?

Conficker.c imbeds itself deep in the computer where it is difficult to track. The program, for instance, stops Windows from conducting automatic updates that could prevent it from causing damage.

The program's code is also written to evolve over time and its author appears to be making updates to thwart attempts to neuter the worm.

Who wrote the program?

It's unclear who wrote the program, but anti-work researchers -- a group calling itself the Conficker Cabal -- are looking for clues.

First, they know that some recent programs have come from Eastern European countries outside the jurisdiction of the European Union, said Patrick Morganelli, senior vice president of technology for Enigma Software.

Worm program authors often hide in those countries to stay out of sight from law enforcement, he said.

In a way, the Conficker Cabal is also looking for the program author's fingerprints. DeBolt said security researchers are looking through old programs to see if their programming styles are similar to that of Conficker C.

The prospects for catching the program's author are not good, Morganelli said. "Unless they open their mouth, they'll never be found," he said.

So, the most effective counter-assault simply may be damage control.

How can I tell if my computer's infected?

One quick way to see if your computer has been infected is to see if you have gotten automatic updates from Windows in March. If so, your computer likely is fine, DeBolt said.

Microsoft released a statement saying the company "is actively working with the industry to mitigate the spread of the worm."

Users who haven't gotten the latest Windows updates should go to http://safety.live.com if they fear they're infected, the company's statement says.

People who use other antivirus software should check to make sure they've received the latest updates, which also could have been disabled by Conficker.c.

How did the worm evolve?

The first version of Conficker -- strain A -- was released in late 2008. That version used 250 Web addresses -- generated daily by the system -- as the means of communication between the master computer and its zombies.

The end goal of the first line was to sell computer users fake antivirus software, said Morganelli.

Computer security experts largely patched that problem by working with the Internet Corporation for Assigned Names and Numbers to disable or buy the problematic URLs, he said.

A second variant, Conficker.b, was released in January and infected millions more machines.

The Conficker, strain C, will generate 50,000 URLs per day instead of just 250 when it becomes active, DeBolt said.

What is being done to fight Conficker?

members are searching for the malicious software program's author and for ways to do damage control if he or she can't be stopped.
They're motivated in part by a $250,000 bounty from Microsoft.
 
Originally Posted by SoleWoman

Users who haven't gotten the latest Windows updates should go to http://safety.live.com if they fear they're infected, the company's statement says.
People who use other antivirus software should check to make sure they've received the latest updates, which also could have been disabled by Conficker.c.


I click on that link but yet it tells me that my system isn't supported
grin.gif
(I'm on windows vista)
 
Originally Posted by pr0phecy718

Originally Posted by SoleWoman

Users who haven't gotten the latest Windows updates should go to http://safety.live.com if they fear they're infected, the company's statement says.
People who use other antivirus software should check to make sure they've received the latest updates, which also could have been disabled by Conficker.c.

I click on that link but yet it tells me that my system isn't supported
grin.gif
(I'm on windows vista)


R.I.P.
eek.gif









jk

smile.gif
 
im not sure. but im taking all my computers off the net. i updated and cleaned them all last night. and i am leaving them off. during the day im work comp.cant be responsible for what happens there...
 
Im turning my comp off disconnecting it too... Ill view from my phone to see if its safe to come out
ohwell.gif
 
YUKU is a wrap....who knows when will talk again on NT.

I heard blackberry aint safe either, so I'm turnin my radio off tomorrow and no PC at all.
 
Originally Posted by gregbutler20

so.... me n my mac are safe
Yes. We are safe my fellow mac brother, so long as we don't use boot windows and osx simultaneously. There is an article on macworld.com about it.


so glad i copped a mac
 
damn yall makin me feel like the world is coming to an end
laugh.gif


like i need to cop some bottled water and flashlights
 
This is some new age Terrorism......Think for a second....if this isn't a Hoax, how ugly things could get........
 
its gon be mad dead tomorrow
laugh.gif


im turnin all my #!*+ off too.. go find me a job or something.. smell some flowers.. something..
 
laugh.gif
...so will i be safer on my imac or my macbook ? ...good eitherway?great thanks
 
Originally Posted by lurkin2long

YUKU is a wrap....who knows when will talk again on NT.

I heard blackberry aint safe either, so I'm turnin my radio off tomorrow and no PC at all.

roll.gif
roll.gif
roll.gif
roll.gif
 
For the firs time im glad that my computer is in the shop getting fixed. Hopefully its not true though. Ill get my comp back when its safe to come on again.
 
Back
Top Bottom