Conficker Gets Update, Does ... Something
Next news- Email |
- Print |
- Comments (40) |
- Share
Conficker has started doing its thing apparently. Its thing has yet to be defined but everyone should panic anyway, okay?
Exactly one week after it was supposed to get its ducks in a line, reports began to trickle in claiming that Conficker had began updating via P2P between infected computers and dropping a mystery payload on infected machines.
According to PCWorld, researchers at Trend Micro reported that infected machines had begun receiving a binary update which tells Conficker to start scanning for other computers that haven't patched the Microsoft vulnerability the virus exploits.
The new update also tells Conficker to contact MySpace.com, MSN.com, Ebay.com, CNN.com and AOL.com apparently to confirm that the infected machine is connected to the Internet, Rik Ferguson of Trend Micro told PCWorld. What’s more Conficker also blocks infected PCs from visiting specific sites. Previous Conficker versions wouldn't let people browse to the website of security companies. This new update is timed to stop running on May 3 although it’s unclear if this deadline will pass as uneventfully as the last.
Trend Micro also notes in a blog post that it does not leave a trace of itself in the host machine. “It runs and deletes all traces, no files, no registries etc,” wrote Ivan Macalintal, an advanced threat researcher.
Conficker has infected millions of computers with the specific number varying, depending on who you ask. The number of infected computers ranges from under 5 million to nearly 15 million machines. You can read all about Conficker in our previous posts, here and here. So what’s the verdict, are you guys starting to panic yet?
Source : Tom's Hardware US
Sponsored links
Related articles
-
This Week's Hot News: April Fool's Edition
Check out this week's top headlines, including our hilarious April Fool's gags!
-
Alienware Updates M9700 Line
Frontal view of the m9700
-
Sony's Sizzling UX180P Micro PC Reviewed
Sony's VAIO UX180P docked in its port replicator with the keyboard open.
Best offers
|
Windows 7 Professional (Full Product) | $299.99 Dell Small Business More info |
|
Office 2007 Home and Student (Full... | $119.95 Newegg.com More info |
|
Windows 7 Home Premium (Upgrade) | $119.99 Dell Small Business More info |
|
Windows 7 Ultimate (Full Product) | $319.99 Dell Small Business More info |
|
Norton Internet Security 2010 - 3 Users | $69.99 Dell Small Business More info |
Troubleshooting Windows 7 With Microsoft's Built-In Tools
Windows 7 is more stable and responsive than Vista, but no operating system is perfect (the same goes for the drivers and apps running on it). We show you a suite of tools built into Microsoft’s shiny new OS to help you troubleshoot your Windows 7 issues. Read More
-
Quick Look: Notebook Performance With Windows XP, Vista, And 7
Windows 7 is here, and we've already established that it tastes great, is less filling, and performs well. But do you want it on your notebook? We compared the performance and battery life of Windows XP, Vista, and 7 on an upper-mainstream mobile system. Read More
-
Windows 7 And Windows Vista: Performance Compared
Microsoft is hyping Windows 7 as the operating system that everyone should adopt. We'd already done a bit of benchmarking in the new OS, but we revisit a longer list of tests today, including more real-world tasks, like boot-up, hibernate, and shutdown. Read More








Someone needs to make a Linux and OS X port. Too many people are missing out on the mass panic.
I've sold all my belongings, filled up the tank and am now on my way to the arctic circle.
Hello, Joshua. What game would you like to play?
Thermonuclear War. Duh.
will this stop any of my daily internet activities?
no
Looks like the bunker will come in handy finally.
The joke is on people like us reading these articles at work instead of working.
Your links to the previous posts are broken.
Beyond not being able to go to norton and mcafee's (and others) websites, is there any other telltale that a machine is infected?
What's the point of a worm not doing anything,, just getting updated. Lame.
The joke is on people like us reading these articles at work instead of working.
I believe that means the joke is on our employers.
It would be quite the ironic moment if the new virus turns out to be installing AVG or a hacked version of norton antivirus etc. and patching it up to date.
Granted this is unlikely in the extreme but in my own twisted mind it would be hysterical. A virus that infects PCs...and cleans them up.
It's secretly forcing us to Fold!!!!
It would be quite the ironic moment if the new virus turns out to be installing AVG or a hacked version of norton antivirus etc. and patching it up to date.Granted this is unlikely in the extreme but in my own twisted mind it would be hysterical. A virus that infects PCs...and cleans them up.
Actually many do fix them to prevent competing malware from invading. Once a malware installs itself as a rootkit it no longer has to worry about existing security programs since it has full control. The security programs just become more defense tools the malware can use.
That is... a mystery... i wonder why no one got track to the person responsible yet? A high bounty is offered... This might just be some conspiracy theory but could this be a plot to sell antivirus or make us rely more on security updates and upgrades... the virus afterall is described as only to affect computers with old system...
I was hoping that Conficker would consist of a fullscreen "APRIL FOOLS", but I was disappointed.
looks like they maybe doing dos attack, or even looking for something
i wonder how will these sites will handle several million pcs mindlessly, repeatedly hitting them. it's got to slow them down, cost them. in addition increase overall internet bandwidth utilization.
looks like they maybe doing dos attack, or even looking for somethingi wonder how will these sites will handle several million pcs mindlessly, repeatedly hitting them. it's got to slow them down, cost them. in addition increase overall internet bandwidth utilization.
Sucks if you have Time Warner
I'm not heading for the basement yet. My linux machine will protect me
So the Norton variant Conficker that they cooked up in the labs doesn't allow you to visit the AVG website? And does nothing else harmful besides making sure you are connected to the internet?
What a threat. I'm sure Norton will be here shortly to make sure everyone buys some Antivirus. Wouldn't want to not be able to access norton.com.
I have no fear of this worm and I am on a windows OS. I have no anti-virus installed either. Common sense is all anyone truly needs.
Why do I bet that this is connected to one or both of the US Power Grid hacks that the government has discovered being set up by both the Russians and the Chinese?
Say...at an opportune moment, the viruses in all the infected PC's activates, assaults the banking, public, and government record systems and wipes everything (like personal and business accounts, all public records, medical records, court records, property records, etc.) and then crashes the entire electric grid to make recovery virtually impossible. Bye, Bye, US economy and infrastructure.
Skynet is here. All Your Base Are Belong to Us. At least we have Christian Bale to strike back at them...
Why do I bet that this is connected to one or both of the US Power Grid hacks that the government has discovered being set up by both the Russians and the Chinese?Say...at an opportune moment, the viruses in all the infected PC's activates, assaults the banking, public, and government record systems and wipes everything (like personal and business accounts, all public records, medical records, court records, property records, etc.) and then crashes the entire electric grid to make recovery virtually impossible. Bye, Bye, US economy and infrastructure.
watched fight club lately?
wayneepalmer Makes a good point... Who knows he might be right...
Question: If i cant access some anti virus websites I have this "thing"? Is that the only way to tell?
The coder who released the virus isn't good enough, so it virus does nothing and is easily removed by the computer proficient?
I thought so. Its not polling CNN and Ebay for internet connectivity: its polling for data. The virus has been deleting itself from computers, right?
I think this is as follows: the people who coded conficker designed it to be a bug to study reactions to the mass infection. It had a "go" date to give everyone one singular point of anxiety: if it went active the moment it touched the computer, it would be like any other infection. But Conficker C has had a year to build up on millions of computers and EVERYONE has heard of it. It's been sprayed across news sites, blogs, and I've seen machines on ebay and craigslist for sale because "it's infected with Conficker, I don't know how to fix it" and more.
In other words, this is a study in panic and reaction to panic. Nothing more.
this "virus" is stupid... just take some Advil and it'll go away.
I thought so. Its not polling CNN and Ebay for internet connectivity: its polling for data. The virus has been deleting itself from computers, right?I think this is as follows: the people who coded conficker designed it to be a bug to study reactions to the mass infection. It had a "go" date to give everyone one singular point of anxiety: if it went active the moment it touched the computer, it would be like any other infection. But Conficker C has had a year to build up on millions of computers and EVERYONE has heard of it. It's been sprayed across news sites, blogs, and I've seen machines on ebay and craigslist for sale because "it's infected with Conficker, I don't know how to fix it" and more.In other words, this is a study in panic and reaction to panic. Nothing more.
I like your argument. I believe it's very possible also. The virus has been generally harmless so far, but yet mass hysteria still occurs. Anything in the name of science right?
this "virus" is stupid... just take some Advil and it'll go away.
Crap, I'm allergic to advil. . .will Tylenol be ok? ? ?
Question: If i cant access some anti virus websites I have this "thing"? Is that the only way to tell?
http://www.confickerworkinggroup.org
I don't think it's the only way to tell, but it is a signficant and very easy way to tell. Check that link above, click on "Check for Infection" and see if any of the images are missing.
I have no fear of this worm and I am on a windows OS. I have no anti-virus installed either. Common sense is all anyone truly needs.
Congratulations.. You are infected. With several worms than.
Are you aware that worms are created to spread itself without users having to click on something? I guess not.
Anyway, worms can be harmless like this one seems to be.
If people know that they have to use fences on their house because the neighborhood is full of malicious ppl than they also should be properly introduced to the Internet. Viruses and Trojans are user based, Worms aren't. A good anti-virus to protect you from known viruses/trojans/worms and a good firewall to protect you from unknown worms.
Done, you are "safe".. I wish...
Anyway, I think that the "paranoia test" is a valid argument. And Linux/OSX users are feeling a bit left out of the party.
Conficker? What's that? A virus? Geez, it's been a long time since I've seen one... And my antivirus isn't installed, what should I do?
Waaaait... It's Windows-only! Pooh, I'm missing on all the fun!
Shall I install Windows on my machine, instead of a Linux distro? Hunting virii looks like it's fun!