Skip to Content

AOL Tech

conficker posts

Computers

U.K. City Unable to Issue Traffic Tickets After Conficker Attack

In the occasional rush to get to the office on time, just about all of us have either illegally driven in the carpool lane or exceeded posted speed limits. Sometimes, you get caught and pay a fine, and sometimes, you get away scot-free. Call it luck and thank the Lord, but drivers in Manchester, England have something else to thank for eluding recent traffic fines -- the Conficker worm.

The Register reports that after Conficker infected the city's computer systems in February, more than 1,600 drivers who were spotted on camera driving illegally in bus lanes were saved from paying fines totaling £43,000, or about $71,300. In response, the city disabled all USB ports on government computers and outlawed memory sticks, which it claims caused the infection. All in all, the worm cost the city nearly £1.5 million, or $2.4 million, between unpaid fines, consultants' fees, clean-up costs, extra staff, and a new backup strategy for its system.

Read more →

Computers, Web

Thought the Conficker Virus Was Bad? Gumblar Is Even Worse.

If you thought Conficker was bad, meet Gumblar. If malware programs were comic book villains, Conficker would be Kingpin -- evil for sure, but really just a big bully. Gumblar on the other hand would be Galactus -- massive, all-powerful, evil, and extremely difficult to defeat.

ScanSafe, a computer security firm, has been tracking the progress of the worm since its arrival on the scene in March, according to CNET. Originally, the attack spread through infectious code that was planted in hacked Web sites and then downloaded malware from the gumblar.cn domain on to victims' computers. But that was just the opening salvo. As Web site operators cleaned their pages of the code, Gumblar replaced the original material with dynamically generated Javascript (Web site code that is created on the spot instead of being completely determined beforehand -- a key element of Web apps like Gmail) that is much harder for security software to detect and remove.

The evolved version also went about adding new domains to the list of sources for downloading its malware payload, including liteautotop.cn and autobestwestern.cn, and began exploiting security holes in Flash and Adobe Reader. The worm also searches out credentials for FTP servers (a method for uploading files to a Web site) on a victim's computer, using them to infect additional Web sites.

Read more →

Computers

Computer Users' Fears of Viruses Helping Viruses to Spread

Computer Users' Fears of Viruses Helping Them to Spread

If stories with twisted logic make your head hurt, you might want to just scroll on down the page and read the next story. Or, go pop an aspirin, because this one's a bit of a doozy. According to Reuters' account of Microsoft's annual Security Intelligence Report, published on Wednesday, people's fears of being infected by viruses and other malicious software is actually helping those viruses to spread. Users are so intent on cleaning their computers, they'll install anything that they think will help -- even if what they're installing is, itself, a virus.

Microsoft says that publicity surrounding viruses and worms like Conficker has resulted in more people fearing them. This has led many users to go searching for programs that say they'll clean your computer -- when, in actuality, many of them contain malicious software and maybe even viruses. That's the case with Anti-Virus-1, a piece of "scareware" that tries to trick you into handing over your credit card number. In fact, of the 25 "top security threats" that the report mentions, seven of them are bogus security programs. What can you do? For starters, stick with virus scanners you can trust, like these. Secondly, ignore those "registry cleaner" programs and others that, at best, don't do a thing, and, at worst, could be packing some malicious payloads. [From: Reuters]

Related Links:

Computers

Dreaded Conficker Virus Activates a Week Later Than Expected

Conficker Activates One Week Later than ExpectedIf you were watching or reading the news last week, chances are you got an ear (or eye) full about Conficker. Everyone was atwitter about how, on April 1st, the virus would awaken and do... something. That day came and went and, ultimately, nothing happened. But, according to CNN, something is finally happening. It seems that the virus is starting to stir, waking up on some machines and reaching out to the Internet.

However, there's still one big problem -- nobody knows what the exploit is planning to do. On Wednesday, the virus awoke and downloaded a package of encrypted instructions that left security experts at anti-virus firm Trend Micro guessing about the future of the virus. Apparently, it is reaching out to various Web sites to ensure it has connectivity and will stop replicating itself on May 3.

That's all we know right now. This means that, before long, it will stop spreading, but just what it'll do to the machines it has already infected remains to be seen. [From: CNN]

Related Links:

Web

Conficker D-Day Quiet So Far

Conficker D-Day Quiet So FarWell, the day is here. April 1st. By now, Conficker was supposed to have reduced us to quivering, crying messes as it destroyed our computers, poured sugar in our gas tanks, and had sex with our mothers.

None of these things have come to pass, however. Instead, Conficker has been relatively quiet all morning. Several outlets have been tracking the worm and all have spotted minimal activity. McAffee has reported that Conficker is reaching out to its "master," but has so far failed to get through.

What does this all mean? No one knows for sure. It could be a deliberate postponing of a major move by the Conficker criminals, who are just waiting until the attention dies down a little bit, or it could all be an elaborate April Fool's hoax. Either way, you can check back with CNET throughout the day for updates. If anything major goes down, we'll certainly be on top of it, unless, of course, Conficker manages to kill the Internet by plugging the "tubes" with more LOLcats than it can handle. [From: CNET]
Related Links:

Computers, Web

Conficker Flaw Found, Detection Tool Released

In the list of the nastiest viruses out there, Conficker would certainly find itself near, if not at, the top. One of the things that makes Conficker such a pest is the difficulty in detecting and removing the malware. Conficker covers its tracks; after infecting a vulnerable PC, it tricks security software into thinking that the Microsoft patch that protects against Conficker has been installed.

Thankfully, a group of researchers have found a bug in the way Conficker applies this false patch, allowing them to easily identify an infected PC remotely. They found that a Conficker-infected PC actually appears slightly different on a network than an uninfected computer.

Dan Kaminsky, who has investigated the worm with the Honeynet Project's Tillmann Werner and Felix Leder, described the new detection method thusly: "You can literally ask a server if it's infected with Conficker, and it will tell you." The group has released a proof-of-concept detection tool, and Kaminsky says that the technology "should already be" integrated into security products from Nessus, McAfee, nmap, ncircle, and Qualys.

We certainly hope so. After all, the April Fool's Conficker d-day is imminent, and we don't want to give the worm a chance to update and fix its own bugs. [From: CNET and Ars Technica]

Read more →

Computers

Conficker Virus to Hijack Computers on April Fool's Day?

Conficker Set to Hijack Infected Machines April Fool's Day

It's been a while since we last reported on developments in the Conficker virus saga -- primarily because there hasn't been much progress. The dangerous virus is still out there infecting PCs and scaring the hell out of security experts.

Have you ever been the victim of a computer virus?



According to CNN, the Conficker Cabal (a self-named group of computer scientists and security companies) dug through the code of the virus and discovered that it's programmed to download an update on April 1st. Yes, on April Fool's Day, a master computer could take control of the millions of infected PCs and turn them into a massive network of criminal-controlled computers. The countdown has begun, but experts in the Conficker Cabal aren't sure exactly what to expect; Conficker could easily erase data on infected PCs, take down Web sites, or (more likely) inundate users with prompts to buy fake security software.


Read more →

Computers

Conficker Virus to Attack Southwest Airlines Web Site


Oh that Conficker virus, it just won't go away. Despite its authors having a bounty placed on their heads by Microsoft, the thing is still spreading, updating itself, and becoming even more prevalent. That spells bad news for Southwest Airlines, discovered Mike Wood, a security expert at SophosLabs. In a recent SophosLabs corporate blog post, he explained that millions of computers infected with the virus are set to start accessing, and thus attacking, the Southwest's Web site on March 13.

Have you ever been the victim of a computer virus?



When the infected hoard begins hitting the Southwest.com site, Conficker will have effectively started a distributed denial-of-service attack, or DDoS attack. The intent is to flood the servers hosting that page and bring them offline, so that anyone else who attempts to browse to that site receives only an error message.

Assuming the attack takes place, it shouldn't impact the overall ability of the airline to launch flights and handle passengers, but online check-in will almost surely be unavailable, as well as any other functionality the airline provides online. So, plan ahead, because you might need to get to the airport a little earlier than you'd like! [From: CNET News]

Related Links:

Computers, Advice

New Version of Conficker Virus Can Update Itself



Just as Microsoft has decided it's done playing games, and has put a price on the head of the hackers behind Conficker, the elusive cyber-criminals have upped the ante. A new version of the malware, dubbed Conficker B++, is spreading like wildfire, thanks to a newly unplugged security hole and self-updating features.

Have you ever been the victim of a computer virus?



The new version allows the virus to download updates that could potentially give it new abilities and ways of spreading. It also skips the download of Antivirus XP, a fake security program that once lured victims into handing over credit card information and later became a dead giveaway of a Conficker infection.

Read more →

Computers

Microsoft Offers $250,000 Reward for Conficker Criminals

Microsoft Offers $250,000 Reward for Arrest of Conficker Criminals
So the notorious Conficker/Downadup/Kido has really caught the attention of Microsoft, and pissed off the maker of the target operating system, Windows. Microsoft is offering a $250,000 reward to anyone who can provide information that leads to the arrest of those responsible for coding and spreading the virus.

The worm, which exploits a hole in the Windows operating system to spread over the Internet, has now infected an estimated 12 million PCs. Microsoft clearly has taken the attack seriously (and personally) -- it has enlisted the help of dozens of other organizations, including ICANN, AOL, Symantec, and Georgia Tech, to help thwart the virus and trace its origins.

We'd like to think that the $250 G's might lead to some valuable information about the criminals behind the worm, but we see how well the $50 million reward for information leading to the capture of Bin Laden has worked out.

If you want to know how to protect yourself or clean the pest off your PC check out our article explaining what Conficker is and how to get rid of it. [From: CNET]

Related links:

Computers

French Fighter Jets Grounded by Windows Virus

French War Planes Grounded by Conficker
Just how powerful is the Conficker Windows virus? Well, according to French publication Libération, the notorious worm is powerful enough to ground French fighter planes.

The systems of the French Navy were infected by Confiicker on January 12 and taken offline to isolate the infection and clear the systems. Two weeks later, the systems are still offline and many weapons systems along with them.

This, of course, raises serious questions about the security of French government systems. Their inability to defend against a computer virus -- one that Microsoft sent advanced warning of and has already patched the vulnerability to -- goes a long way towards explaining the French reputation, at least on 'The Simpsons,' as cheese-eating surrender monkeys. [From: CNET]

Related Links:

Computers

Storm Worm Reborn as Malicious Valentine's Day Greeting

Waldec -- The Second Coming of the Storm Worm
As if the threat of the Conficker hanging over our heads weren't enough, now we've got the second coming of the Storm Worm, called Waledec, to watch out for.

Waldec spreads via e-mails claiming to have a Valentine's Day greeting for you. Clicking on the link contained in the message takes you to a page containing dozens of hearts with the message "guess which one is for you? Clicking on any of the hearts prompts you to download and install an .exe file containing malicious code that spams other e-mail addresses it finds in your inbox.

Paul Ferguson, a researcher at Trend Micro, maker of anti-virus software, says he believes that Waldec and Conficker are the work of the same group. There are hints in the coding that suggest the same organization worked on both viruses.

Waldec should be a little easier to avoid than Conficker because of its reliance on unsolicited e-mails, which we're hoping you've learned to ignore by now. [From: CNET]

Related links:

Computers, Advice, Windows Software

What Is the Conficker Virus and Should You Be Worried?

Everything You Wanted to Know About Confiker, But Were Afraid to Ask

What is Conficker?
Conficker, also known as Downadup or Kido, is the latest super virus to spread around the Internet and has security experts in a panic. When last we checked, about a week ago, Conficker had already spread to 9 million PCs, with little sign of slowing. Now it has infected at least 10 million PCs and experts believe there may be up to 350 million vulnerable computers out there.

The worm isn't just exploiting a networking hole, however; it features a sophisticated method of cracking administrator passwords, making it difficult to remove, and also copies itself to USB drives so that it can spread even when the online flaw is plugged.

What havoc has it wreaked so far?
So far this schizophrenic virus hasn't caused any serious damage. Its primary effect has been to prevent people from installing Windows updates and anti-virus software that could potentially thwart the malware. What worries security experts, though, is Conficker's ability to launch a second stage, downloading additional code that could hijack computers completely, steal personal information, or commit basic extortion -- demanding money for fake anti-virus software claiming to remove the infection.

Read more →

Computers

Tricky Windows Worm Spreads to 9 Million PCs



Remember this nasty worm with multiple-personality disorder we reported on last week? Well, apparently, it is still spreading, and is now responsible for an estimated nine million infected computers! So far it hasn't done anything especially nasty, beyond finding its way onto machines, but that doesn't mean you want it lurking on yours!

Security experts at F-Secure believe the piece of malware may not be acting as the hackers who designed it intended. The firm believes that the worm was meant to give false alerts saying that malicious software had been discovered on a user's PC and then encourage that user to buy fake anti-virus software. So far, this behavior hasn't been seen, but that doesn't mean that Conficker, Downadup, Kido -- whatever it wants to call itself -- isn't leaving open a back door for hackers to steal passwords and other personal information.

Microsoft has already released a patch to battle the worm, however one of its effects is to disable automatic updates on infected machines. So head to WindowsUpdate.com, if you haven't already, to make sure you get this latest patch! [From: FOXNews.com]

Read more →

Computers, Windows Software, Laptops, desktops

Tricky Windows Worm Hits 3 Million Computers


Have you updated your Windows machine lately? If not, as always, you certainly should! Word is coming from a number of virus and malicious software experts that a certain piece of nasty software with a number of names has gone on to infect three million Windows machines around the world, with the most infected being in places like China, Brazil, Russia, and India.

The software is known as Conficker, Downadup, or Kido, but by any name, it's a worm, which is software that infiltrates machines and then spreads itself from there. This one is particularly shady and deceptive, renaming itself with every install and also connecting to random online servers, making it very difficult to detect. Once on your machine, it has the power to do whatever it likes, including steal your passwords and private information.

Have you ever been the victim of a computer virus?




Thankfully Microsoft has released a patch ensuring your machine will be safe, and most virus manufacturers can detect it. So, make with the updating already! [From: BBC News]



Read more →

Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    9.0 out of 10

    Denon AVR-4306 (black)
    Incredibly well-featured 7.1-channel receiver; excellent sound quality; three HDMI inputs; converts analog video to HDMI output; upconverts analog video to 720p/1080i HD resolution; iPod and USB MP3 player connectivity; Internet radio and MP3/WMA streaming audio via built-in Ethernet port; XM Satellite Radio compatible; touch-screen remote; multizone, multisource operation; browser-based control via home network; accurate autocalibration routine. Full Review

    8.8 out of 10

    KEF KHT3005 (black)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.3 out of 10

    LG VX6000 (Verizon Wireless)
    Compact and stylish; impressive battery life; solid audio quality; sharp color screen; built-in camera; USB ready; affordable. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

    8.9 out of 10

    Velocity Micro Edge Z30 (Intel Core i7)
    Best value among midrange gaming PCs; Velocity Micro's consistently high build quality; compact case makes few sacrifices; second graphics card slot previously uncommon at this price. Full Review

    8.5 out of 10

    Apple iMac (24-inch, 2.8GHz)
    A minor specification update results in some significant performance gains; graphics upgrade an option on this 24-inch model; sleek, polished design didn't receive an update, but we won't start clamoring for a new design until the current one is at least 12 months old. Full Review

    8.4 out of 10

    Velocity Raptor Signature Edition Gaming PC
    One of the fastest PCs we've tested; a PCI Express RAID card helps media encoding performance; typically immaculate Velocity Micro assembly; strong, three-year warranty. Full Review

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

Daily Finance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling