Whats the deal with the fast-moving Conficker computer worm

[Robin Binder]

Anyone else heard of "The fast-moving Conficker computer worm, a scourge of the Internet that has infected at least 3 million PCs, is set to spring to life in a new way on Wednesday — April Fools' Day."?

[groovyone]

I mad sure my mal-ware scanner was up to date.

[boxofrocks]

From my wife's (very good) IT folks:

SECURITY ALERT - VIRUS



According to several reliable sources, a virus (or Trojan) is expected to be activated on April 1st, 2009. This impact of this virus, known as Conficker C, is not entirely known. The program could delete all of the files on a person's computer, use zombie PCs -- those controlled by a master -- to overwhelm and shut down Web sites or monitor a person's keyboard strokes to collect private information like passwords or bank account information.



XXXX is taking steps to ensure all of our PC's and servers have the latest antivirus signatures and patches. Employees should also take similar steps for their home PC's. One of the traits of this virus is to disable Windows from conducting automatic updates. If you think you are infected, you can run a free scan from Microsoft at Microsoft Live – please only run this on your home PC. xxxx's IT department will take steps to ensure your work PCs are protected. If you are using a xxxx laptop, please make sure you connect it to the network before April 1st to receive the latest antivirus patches.

[Robin Binder]

Thanks Tom, I found this video on CNN.

<script src="http://i.cdn.turner.com/cnn/.element/js/2.0/video/evp/module.js?loc=dom&vid=/video/tech/2009/03/28/dcl.data.doc.computer.worm.cnn" type="text/javascript"></script><noscript>Embedded video from <a href="http://www.cnn.com/video">CNN Video</a></noscript>

[boxofrocks]

Originally Posted by RmgB

Thanks Tom, I found this video on CNN.

<script src="http://i.cdn.turner.com/cnn/.element/js/2.0/video/evp/module.js?loc=dom&vid=/video/tech/2009/03/28/dcl.data.doc.computer.worm.cnn" type="text/javascript"></script><noscript>Embedded video from <a href="http://www.cnn.com/video">CNN Video</a></noscript>

Thanks, but that's a bas link.

[rphoto]

On the news this morning they said to go to an anti virus website light symantic and if the website opens you should be good and not have it. They said this is already on most computers and will come alive tomorrow and if it was on your computer then it would block you from going to these sites to update your software. I don't know if this is true or not but if so it is an easy way to check your computer

[Coelus]

From a recent IT email.

Conficker Worm Targets Microsoft Windows Systems

added March 29, 2009 at 08:18 pm | updated March 30, 2009 at 03:06 pm

US-CERT is aware of public reports indicating a widespread infection of the Conficker/Downadup worm, which can infect a Microsoft Windows system from a thumb drive, a network share, or directly across a corporate network, if the network servers are not patched with the MS08-067 patch from Microsoft. You should enable Windows updates or update your home computers patches to include KB962007.

Microsoft:

http://support.microsoft.com/kb/962007

http://www.microsoft.com/protect/com...conficker.mspx

Microsoft PC Safety hotline at 1-866-PCSAFETY, for assistance.


Home users can apply a simple test for the presence of a Conficker/Downadup infection on their home computers. The presence of a Conficker/Downadup infection may be detected if a user is unable to surf to their security solution website or if they are unable to connect to the websites, by downloading detection/removal tools available free from those sites:

http://www.symantec.com/norton/theme...conficker_worm
http://www.microsoft.com/protect/com...conficker.mspx
http://www.mcafee.com

If a user is unable to reach any of these websites, it may indicate a Conficker/Downadup infection. The most recent variant of Conficker/Downadup interferes with queries for these sites, preventing a user from visiting them. If a Conficker/Downadup infection is suspected, the system or computer should be removed from the network or unplugged from the Internet - in the case for home users.

Instructions, support and more information on how to manually remove a Conficker/Downadup infection from a system have been published by major security vendors. Please see below for a few of those sites. Each of these vendors offers free tools that can verify the presence of a Conficker/Downadup infection and remove the worm:

Symantec:

http://www.symantec.com/business/sec...011316-0247-99



US-CERT encourages users to prevent a Conficker/Downadup infection by ensuring all systems have the MS08-067 patch (see http://www.microsoft.com/technet/sec.../MS08-067.mspx), disabling AutoRun functionality (see http://www.us-cert.gov/cas/techalerts/TA09-020A.html), and maintaining up-to-date anti-virus software.

[Rson]

if i were a betting man, I'd say that no a damn thing will happen and this is hyped like Y2K, Canon 5dII and Vista.


(heheheheehe)

[Coelus]

Started by symantec to boost sales maybe?

[SeanS]

Originally Posted by Coelus

Started by symantec to boost sales maybe?

As I watched an entire commercial, I mean segment, featuring Symantec talking about Conficker, on 60 Minutes this weekend, I was convinced of the same...

[Crashoran]

Give me a break. How can somebody know when a virus will suddenly attack? It's just a scheme to get sales.

[Rson]

OMG, it is April 1st.......all hell has broke loose.

NOT

[kayumangi]

It's a marketing ploy to force you to buy more AV software specially the one coming from MS =)

If you have a decent firewall and understand and know which programs are running on your PC and what they are accessing, then no amount of malware marketing should ever bother you.

[AndrewCCM]

Hardly a marketing thing.

My job for the last 17 years has been in information security. We have been tracking this exploit for quite some time and have been doing penetration testing worldwide to mitigate our companies risk as much as possible.

I am up with a few of my colleagues right now monitoring the situation. At least for our company, we're in good shape right now so it appears.

[crazeazn]

Originally Posted by AndrewCCM

Hardly a marketing thing.

My job for the last 17 years has been in information security. We have been tracking this exploit for quite some time and have been doing penetration testing worldwide to mitigate our companies risk as much as possible.

I am up with a few of my colleagues right now monitoring the situation. At least for our company, we're in good shape right now so it appears.

agreed, this could result into an IT nightmare.