Conficker C Virus!*READ*

Status
Not open for further replies.
S

Stick

Poster Extraordinaire
Joined
Jan 5, 2008
Messages
2,471
Make sure your protected.


http://www.confickercvirus.com/?gclid=CM2HnbfKy5kCFQVuswoduALktg

http://www.microsoft.com/security/malwareremove/default.mspx

http://www.microsoft.com/protect/computer/viruses/worms/conficker.mspx

http://www.guardian.co.uk/media/2009/feb/13/microsoft-offers-250k-bounty-conficker-worm


If you have windows vista make sure that you enable User Account Controls (UAC) and Data Execution Prevention (DEP). These two things with a strong firewall and virus/malware protection should block the conficker c worm. I will post tutorials at the bottom of this page on how to enable all of those things along with a free 30 day trial of anti-virus program in case you do not have protection. By the way guys in case you didn't know it is called conficker C because it has mutated twice for conficker A and conficker B. It is also called W32.Downadup.B and W32.Downadup.A. Also conficker its self has the name variants Downup, DownandUp and Kido. If you see any of these programs stop and kiss your computer goodbye because your already infected. Basically guys
DO NOT DOWNLOAD ANYTHING APRIL 1ST!!!!


Tutorials:

To find your User Account Controls panel go to run/msconfig/tools/scroll down/enable uac/launch/apply/ok

To find your Data Execution

1.Open System by clicking the Start button , clicking Control Panel, clicking System and Maintenance, and then clicking System.
2.Click Advanced System Settings. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
3.Under Performance, click Settings.
4.Click the Data Execution Prevention tab, and then click Turn on DEP for all programs and services except those I select.

Source:http://windowshelp.microsoft.com/Windows/en-US/Help/1d9bb9b4-f6ba-466d-ac2b-7b8c4f8361611033.mspx

To enable your firewall or to check if it is enabled go to start/control panel/security/firewall

*Note that some control panels are different so you may not have the exact same path ,but you should have similar readings.

An excellent 30 day trial program is ESET NOD32 Anti-Virus.

http://www.eset.com/


Thanks guys be safe,
Kevan
 
Last edited:
o i put in general so that everyone would be away because of how close the date is.
 
Just seems like paranoia to me, This happens every year. And, if were afraid of downloading anything on April 1st, we should be careful what we DL on April 2nd, 3rd, 4th, etc. Viruses are out there, and they will always be.
 
Beta said:
Just seems like paranoia to me, This happens every year. And, if were afraid of downloading anything on April 1st, we should be careful what we DL on April 2nd, 3rd, 4th, etc. Viruses are out there, and they will always be.
Click to expand...

I think this virus (worm) is actually a credible reason to be a little anxious.

I read an article about this on Cnet.com that was taken from 60 Minutes: They explained that this worm has infected tens of millions of computers internationally, and that the worm is lying dormant, deep inside your PC, and all its function is, as we know, is to await further orders. It's like a sleeper-cell, awaiting to be given a command. But what will that command be? All there is after the apparent function is the date: April 1. During that interview on 60 Minutes, it was reported that CBS was hit by the virus, and it took their computer technicians 24/7 for 10 straight days to just locate the infected machines among however many they own.

I mean, imagine if on April 1st this thing was activated, and when people across the world turn on their computers, the virus was ordered into action.

In this case, I think it's really better to be safe than sorry.
 
Exactomondo mental this is no ordinary April fools joke that hackers usually play. This thing is very serious and very real as Mental said CBS was hit when they were broadcasting about it, Microsoft has put a 250,000$ bounty on the people who wrote the code for this worm, and even hackers are scared! This is not something to just relax and try to wade through either you pull the plug on you computer or you get the best protection against this worm you can get. Which at that is very little....this worm is so malicious and destructive our best computer tech people in a frenzy. Please just be safe...
 
Beta said:
Just seems like paranoia to me, This happens every year. And, if were afraid of downloading anything on April 1st, we should be careful what we DL on April 2nd, 3rd, 4th, etc. Viruses are out there, and they will always be.
Click to expand...

I'm with Beta on this one. Sure it might be a nasty virus, but there are worse ones out there. And besides 10 million computers infected is less than 1% of total computers. All in all, life will go on.

However, regardless of this particular virus, it's always a good idea to backup your files regularly.
 
Last edited:
Keep in mind this will only affect a system that isnt up to daye , and a system that is pirated .
 
As previously mentioned this will generally only affect computers that are out of date. So third world countries are mostly at risk. But the major threat is that if the people who coded this decide to make this a giant botnet. They could theoretically bring down the global economy.

Oh well. We'll see in a few days.

I severely doubt it'll be bad. But i have been wrong before.
 
I just recently heard about this at school and makes me scared because I dont use anti virus stuff at all.

besides that, A worms main purpose is to multiply and spread Therefore April 1st is not the only day in which you can get the worm. I suggest you not only worry about it april first but worry about it everyday.
 
eh, I think I'll keep UAC disabled. Too much of an annoyance with it on.
 
no Av == begging for trouble , unless you ahve a mac , or linux , and heh , if there r problems ill just run ubuntu :P and just so you know , i will be anciously waiting 2 see if anything happens , im kinda hoping for a botnet , just to see history here .
 
Omg, a nation-wide botnet. That would be legendary. and I bet half the people are wondering what a botnet is.

I'm not scared. If something happens, I can always reformat. It's what these idiots want, people to be scared.
 
Please use the search function, as this is the third Conficker thread up right now.

And yes, if they use the botnet in the best way they possibly could then they could Ddos anyone they wanted and win.
 
Update. A way to figure out if your machine has been infected aside from using the AV scanners and what not.

http://i.gizmodo.com/5191976/11th+h...orate-networks-from-conficker-worms-nastiness

"What we've found is pretty cool: Conficker actually changes what Windows looks like on the network, and this change can be detected remotely, anonymously, and very, very quickly. You can literally ask a server if it's infected with Conficker, and it will tell you."

So if you know your Network lingo and areas check your machine out. Make sure it is not doing that.


"We may not know what the Conficker authors have in store for us on April 1st, but I doubt many network administrators want to find out. Maybe they don't have to: I've been working with the Honeynet Project's Tillmann Werner and Felix Leder, who have been digging into Conficker's profile on the network. What we've found is pretty cool: Conficker actually changes what Windows looks like on the network, and this change can be detected remotely, anonymously, and very, very quickly. You can literally ask a server if it's infected with Conficker, and it will tell you. Tillmann and Felix have their own proof of concept scanner, and with the help of Securosis' Rich Mogull and the multivendor Conficker Working Group, enterprise-class scanners should already be out from Tenable (Nessus), McAfee/Foundstone, nmap, ncircle, and Qualys.

We figured this out on Friday, and got code put together for Monday. It's been one heck of a weekend.

The technical details are not complicated -- Conficker, in all its variants, makes NetpwPathCanonicalize() work quite a bit differently than either the unpatched or the patched MS08-067 version -- but I'll let Tillmann and Felix describe this in full in their "Know Your Enemy" paper, due out any day now with all sorts of interesting observations about this annoying piece of code. (We didn't think it made sense to hold up the scanner while finishing up a few final edits on the paper.)"

http://www.doxpara.com/?p=1285
 
Anarchy_Slug said:
As previously mentioned this will generally only affect computers that are out of date. So third world countries are mostly at risk. But the major threat is that if the people who coded this decide to make this a giant botnet. They could theoretically bring down the global economy.

Oh well. We'll see in a few days.

I severely doubt it'll be bad. But i have been wrong before.
Click to expand...

we have a global economy? i thought that collapsed
killerkills said:
I just recently heard about this at school and makes me scared because I dont use anti virus stuff at all.
Click to expand...

please for the love of all things eGO tell me you were joking. that or your actually insane
 
Status
Not open for further replies.

Latest posts

Back
Top