Computers, Advice, Windows Software
What Is the Conficker Virus and Should You Be Worried?
Conficker, also known as Downadup or Kido, is the latest super virus to spread around the Internet and has security experts in a panic. When last we checked, about a week ago, Conficker had already spread to 9 million PCs, with little sign of slowing. Now it has infected at least 10 million PCs and experts believe there may be up to 350 million vulnerable computers out there.
The worm isn't just exploiting a networking hole, however; it features a sophisticated method of cracking administrator passwords, making it difficult to remove, and also copies itself to USB drives so that it can spread even when the online flaw is plugged.
What havoc has it wreaked so far?
So far this schizophrenic virus hasn't caused any serious damage. Its primary effect has been to prevent people from installing Windows updates and anti-virus software that could potentially thwart the malware. What worries security experts, though, is Conficker's ability to launch a second stage, downloading additional code that could hijack computers completely, steal personal information, or commit basic extortion -- demanding money for fake anti-virus software claiming to remove the infection.
How do you know you have it? What are the symptoms?
Since it is currently sitting dormant, possibly awaiting further instructions, Conficker is very difficult to detect without running an up-to-date virus and malware scanner. However, if your Internet connection is running abnormally slowly, if services such as Windows Defender is disabled, or if you are unable to access some security-related Web sites (like those for anti-virus programs), then you may be infected and should certainly follow the removal directions included below.
Is it the biggest virus ever?
Conficker has certainly spread far and wide, and gathered its fair share of media attention, but is it the biggest virus ever? That remains to be seen. It is certainly the biggest threat to personal computer security to come along in the last few years and would easily claim a spot on our list of the 15 Sneakiest Computer Viruses.
What can you do to stay safe?
Microsoft has already issued a fix for defeating the worm, but a full 30-percent of Windows PCs have yet to download the security update. So make sure you run Windows update and download the latest fixes. The latest versions of Norton, Kaspersky, McAfee, and the Switched-endorsed AVG are all capable of detecting and blocking Conficker, so make sure you have downloaded all updates to your anti-virus software.
Experts also suggest disabling autorun to prevent yourself from becoming infected via USB drive. Turning off autorun isn't easily done, so follow these directions:
- Go to the Start Menu and select 'Run'
- Run the following command: gpedit.msc
- In the Group Policy window go to Computer Configuration -> Administrative Templates -> System
- Under 'System,' double-click the 'Turn Off AutoPlay' option from the right hand pane
- Select 'Enable' and choose 'All drives' from the drop down menu
No. There's no need to buy a new computer, as most security programs offer ways to remove the worm.
If you think you're infected, download and run Microsoft's Malicious Software Removal Tool, or follow the directions found here to manually remove the worm.
Will it strike again? If so, where and how?
It's impossible to know if and when Conficker will strike again, especially since it is still running free and has yet to reveal its true purpose. Since Conficker is capable of downloading additional malicious code, it is also capable of self-updating. This function allows the worm to take advantage of other security holes once the ones it currently exploits are closed.
Potentially, Conficker could hang around for a very long time, or resurface in a slightly different form down the road. Knowing exactly when or where Conficker will rear its ugly head is simply impossible, but you can keep yourself safe by making sure your PC and security software (that includes anti-virus, spyware tools, and firewall) are up-to-date. Also, be sure to practice good browsing habits: avoid opening e-mail attachments from unknown addresses, don't download software from questionable sources, and stay away from sites whose security and legitimacy are uncertain.
Related Links:
_thumbnail.jpg "Vintage Keyboards")
Reader Comments (Page 1 of 4)
Willy said 3:18PM on 1-28-2009
"Buy a new computer"?
Wow! Can you make this headline just a LITTLE bit more sensationalistic? At worst, you'll have to reload Windows. There is NO need to replace your computer. What idiocy...
Reply
spikedcrazy300 said 3:25PM on 1-28-2009
LOL, they say its better to buy a new comp rather than format your HDD and re install windows...HAHAHAHA!!! Wow, and i bet there are a bunch of people who believe this crap too. Well for starters. its always a good idea to have a extra HDD installed. Mainly for storing IMPORTANT stuff. You can safeguard a backup HDD. Its simple to do. There is no need to go out and buy a new comp just cuz of some virus. Hello, thats what they make Anti-virus for. But in this case i guess the virus is smarter than 70% of the population.
But there are tons of ways you can safeguard your comp against viruses, spamware, maulware. Get on the internet and search, thats what its there for.
Reply
what2do said 3:36PM on 1-28-2009
My pc says it can't find gpedit.msc.... What else should I do?
Reply
Michael Cox said 4:07PM on 1-28-2009
I had to reformat and reload windows. I couldn't run any antivirus software or malware. I also couldn't get any windows update. Reformatted C drive after putting all documents on D drive. Reformatted and reinstalled windows and antivirus and malware before accessing D drive. Then cleaned D drive so I would not become reinfected and have to do the same thing again.
Euri Wajina-Atole said 6:34PM on 1-28-2009
Actually some earlier versions of windows do not carry gpedit and you may have to use bios. The fact that you are trying to prevent your comp from getting the virus and stop the spread by following the instructions is great. I'm sure that helped alot of other people though MikeCox.
pushka said 1:08PM on 2-01-2009
I actually downloaded and ran windows defender because we were having issues with the virus protection not being recognized as well as it wasn't uploading the current database for viruses or windows update. There were a couple of other things it was doing as well. As soon as I ran it, and it didn't say it found anything either everything corrected itself I was able to run windows update, run the anti-virus as well and is updating that. Unless something gets into the mother board and totally fries something there is no need to go out and get a new computer. I agree keep extra portable memory storage for things you don't want to loose, back up, back up, back up anytime you have something new you want to save. We had just gotten done in Dec putting a new copy of windows on so I was not happy about the prospect of reformatting everything again!
DoctorBob said 3:38PM on 1-28-2009
"Buy a new computer???" Yeah, and you'd better get rid of all your old underwear, dig up your garden, and change the oil on your car. This is ridiculous. Even if they don't have a "fix" for it today, you can be sure that antivirus companies are working overtime to come up with a cleaner. If it's not ready today, it'll be ready tomorrow or the next. Just keep those antivirus and anti-malware detection files updated, and run them regularly. Of course, you DO have a router (hardware firewall), don't you? And you DO run AVG or something similar in the background, and scan every night - right? And you DO scan with Malwarebytes every few days... correct? And you DO regularly update Windows... n'cest pas? And you DON'T go blindly downloading pictures and files from porn sites... of course not. So, go back to sleep. You're fine.
Reply
peppie said 4:01PM on 1-28-2009
yep got my desktop like 3-4 months ago cant download any fixes cause it prevents me from going to the microsoft website cant download antivirus or security either it blocks and it took full control of my firewall disabling all my antivirus and secruity
Reply
clinton said 6:35PM on 1-28-2009
Peppie,
Things nowadays are really weird so, go to mcafee.com. That is where I got mine friend.
God bless You,
Clinton H.
costa said 4:13PM on 1-28-2009
whjat kind of sick &^%$# person does this.Jail time with a bunch of horny prisioners when they find the bugger.
Reply
mikey said 5:19PM on 1-28-2009
this virus scan is not free as aol says it is it will cost you 49.99 as always aol lies to you thank you aol keep up the good work.
Reply
just me said 4:42PM on 1-28-2009
It would be nice if someone tells you where some of the people were getting it. What web sites?
Reply
martjewell said 4:46PM on 1-28-2009
If you're going to relaod your operating system then use Freespire (which is a Linux flavour) rather than MS Windows as a) it is FREE (yes, really), b) it DOES NOT SUFFER from these stupid Windows security problems, and c) it will run FAST on even older PCs so YOU DON'T NEED TO BUY A NEW ONE.
This is real - I use it at home and other linux variants on my work machine. Big companies (like IBM) are behind Linux - it's not just teenagers in their bedrooms creating this stuff.
Reply
Keith said 5:54PM on 1-28-2009
Buy an Apple and you wouldnt have to worry about this kind of stuff...haha
Reply
Noah said 2:09PM on 3-27-2009
It costs quite a bit to buy one of those. As much as i want one.
mamie greene said 7:39PM on 1-28-2009
I have lost count of the number of pages I have visited looking for the software. I have YET TO FIND IT. SOME PAGES I HAVE VISITED MORE THAN ONCE. I NEVER FOUND IT SO FORGET IT.
Reply
Charles Norrie said 10:08PM on 1-28-2009
Simply install Ubuntu Intrepid Ibex as your operating system and you will never suffer from malware again
Reply
ronald said 5:58PM on 1-28-2009
i have the worm virus it says security system found 300 viruses on your computer pay 45 dollars for full scan. keeps popping up
and nothing i can do its mall ware is fake no viruses all malware protection is a scam as long as its about this
Reply
annie said 6:15PM on 1-28-2009
You have propably got antivirus 2008 or antivirus 2009. It is a malware that installs itself when you try to click it off. It will rename all your files and prevent you from opening them. You will need help from a professional to get rid of it because you will not be able to go online and download the fix.
dslyohio44439 said 2:03AM on 2-25-2009
As Annie said, you probably have the Antivirus 2008 or 2009. I used Malwarebytes Anti Malware to remove this from the computer, and it saved my system. Search for it at download.com. This program is freeware, but it does not self update or do real time scans... Definitely not to be used as a primary program.