• On The Insider: Britney's Bikini-Clad Top 10
April 1, 2009 8:05 AM PDT

All quiet on the Conficker front. Now what?

by Elinor Mills
  • Font size
  • Print
  • 35 comments

As expected, the Conficker worm failed to cause the digital pandemonium that some may have feared.

So, can we all just go back to playing on Facebook and watching the game now?

Not really. Just because the worm failed to create much of a stir on the day it was set to activate, April 1, doesn't mean it won't wake up and act later.

"The (malicious) hackers can tell their worm to do something any day of the year; they're just as likely to do it tomorrow or next Wednesday or in August," said Graham Cluley, a senior technology consultant with Sophos.

Then why the April 1 message in the code?

Cluley says he doesn't know. "This was such an invisible change inside the code. It was inconsequential to the infected computer that maybe (the creators) didn't think there would be such a frenzy," he said.

Today, as on any day, PC users should make sure their systems are patched and running the latest security software. People should patch their systems to close the hole in Windows it exploits and update their anti-virus software. The major anti-virus vendors all have free Conficker removal tools.

The worm also can spread via network shares and removable storage devices like USB thumb drives. So users are advised to use strong passwords when sharing files on a network and to download a patch Microsoft released to address the Autorun feature problem in Windows that makes using removable storage risky.

Oh, and be careful about searching for Conficker removal software on Google. Scammers have managed to get fake security sites among the top searches, Cluley said. Bogus sites are designed to steal your credit card information and could install malware on your computer instead of a legitimate security program.

So, what is the intention behind the worm, anyway? Why all the fuss?

Like many other worms, it's likely the Conficker worm is designed to create a botnet that could be used to send spam, launch denial-of-service attacks to shut down Web sites or steal data from infected computers.

David Perry, global director of security education at Trend Micro, said he suspects that the worm creators will slice up the botnet and sell it to spammers via underground forums, like they did with the Storm worm.

"The funny thing is that everyone has these expectations that come to them from science fiction viruses. In the movies they blow up the terminal, tip over an oil tanker and bring aliens out of the sky," said Perry. "In reality, the kind of thing a botnet does is much less visible. It's a lot more insidious of them to steal your bank password than to blow up your computer."

Hear more about what happened and didn't and why on this CNET podcast.

Update 9:45 a.m. PDT Microsoft is offering a $250,000 reward for information leading to the arrest of whoever is responsible for the Conficker worm, but this isn't the first time the company has done that. Microsoft launched its $5 million Anti-Virus Reward program fund in 2003 and offered $250,000 rewards each for the MSBlast worm, the Sobig virus, the MyDoom virus and the Sasser worm, but only ended up paying out on Sasser.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
advertisement
Click Here
Recent posts from Security
Microsoft actively urges IE 6 users to upgrade
Microsoft investigating 'black screen of death'
Pub fined $13k for Wi-Fi copyright infringement
Tips for safe online shopping
Big changes in Security Starter Kit 2010
Confidential 9/11 pager messages disclosed
Microsoft warns of IE exploit code in the wild
Chrome OS security: 'Sandboxing' and auto updates
Add a Comment (Log in or register) (35 Comments)
  • prev
  • 1
  • next
by seven7dust April 1, 2009 8:23 AM PDT
Conflicker was a Aprils fool joke the hackers pulled
and you Windows users fell for it big time !
Reply to this comment
by john55440 April 1, 2009 9:52 AM PDT
In addition to the media, it's Linux Fanboys like Steven J. Vaughan-Nichols who fell for it big time.

Conflicker exploits a hole that Microsoft patched way back in October 2008, so I knew that it would not be a problem for me, or anyone else who keeps their system up to date,
by Mr. Dee April 1, 2009 10:05 AM PDT
Steven J. Vaughan-Nichols is a moron.
by hc2008 April 1, 2009 6:43 PM PDT
Conficker was designed not to let the end user be aware of it's intentions (stealing data and not harming the computer as with the stereotypical virus/trojan). With a world of instant gratification, and nothing happening, everyone will move on in apathy -- exactly what the writers of this worm probably anticipated and hoped for.

Example, people were freaking out over the Y2K bug hyped up by the media and nothing happened. Apathy set in afterwards and these same people were so caught up in the media hype they forgot to buy a weather radio for the springtime hurricane season.
by jinx101a April 1, 2009 8:34 AM PDT
You mean the media fell for it big time. Most media outlets couldn't even get the facts straight on their stories.
Reply to this comment
by Mark_Anderson April 1, 2009 9:07 AM PDT
Exactly. Give it a rest, Elinor. You just look silly.
by David_Green April 1, 2009 8:41 AM PDT
Conficker.C virus (which went active today) traffic is going undetected since it is using IPv6 in its "named pipe" channel as a covert channel
Reply to this comment
by another_cissp April 1, 2009 8:57 AM PDT
Traffic would be detected, ipv6 is barley being used on the internet so just a little extra bandwidth would easily be noticed. Also, how is conflicker suppose to cause any damage using a protocol that almost no one has adapted?
by ghormax April 1, 2009 8:59 AM PDT
abhi_jais, I have Linux on my PC and I am also not worried. Ubuntu Linux is user friendly and easy to install. Every time I go to work, I wish I could use Ubuntu there too. I find files faster, open USB devices faster, and I have more control over the administration!
Reply to this comment
by Mark_Anderson April 1, 2009 9:08 AM PDT
And no really useful business software.

Next.
by Vegaman_Dan April 1, 2009 9:20 AM PDT
You're absolutely right. Last year I downloaded the latest ISO of Ubuntu for that time, burned to disc and then did a clean install of Ubuntu in only 20 minutes. Excellent. Fully secured and patched!

Oh wait a moment- the first thing it did was tell me of *85* mandatory critical security updates that it needed to run immediately before I could use the system. That took more than three hours with a cable connection.

Yeah... that's not exactly a positive experience end users should have to go through for their first exposure. OS X and Windows both install fully updated versions in shorter time.

As for the rest of your comments- it's easier to find files faster- there are fewer files for you to look at. USB devices open faster because again, there are a much smaller number of USB devices supported- if it isn't, then you're on your own to hopefully dig through obscure forums to find something or write your own. Again, not something the neophyte should be expected to do for an out of the box experience. You do indeed have more control over the administration- and that's because you need to in order to bring the system up to a usable state in comparison to OS X or Windows.

Argue or deny the facts all you want, but this is the reality of the situation.
by CrashPad63 April 1, 2009 10:32 AM PDT
Linux is not user friendly. Try working with folks who fell for that with the first wave of netbooks. Then howled because they could not get it. Removed and put XP on them.
by texaslabrat April 1, 2009 12:34 PM PDT
"Oh wait a moment- the first thing it did was tell me of *85* mandatory critical security updates that it needed to run immediately before I could use the system."

and the alternative being having an unpatched, unsecured system ('cause, you know..that's what windows does..it MUST be the better way!!) until the user "gets around to" running the patcher is preferable to waiting for the OS to automatically download/install security updates immediately after installation? /rolleyes.

It's that philosophy that has created the foundation for building botnets. Convenience trumping security ftw! My only wish is that there was a way to fine people who let their machines become infected....force some personal responsibility onto the userbase for a change when their negligence helps to jeopardize the internet as a whole.

And you're right...Linux isn't as user-friendly as Windows (xp, anyway) because the newest Linux distro's actually insist on doing a lot of things with a "best practices" approach..which can be inconvenient and/or unfriendly. MS is trying to figure that out with Vista's UAC...better late than never.
by ghormax August 25, 2009 7:09 AM PDT
I have to my comments here. First of all, if you buy a Windows OS you also have to do frequent updates. It just won't tell you how many problems there are. Furthermore, Windows Updates only affect your OS, Ubuntu updates are for all Ubuntu supported software (it includes Firefox, OpenOffice, etc)
Secondly, if you say it is not user-friendly, you haven't tried it. On my computer, everything but the printer worked out of the box (without installing anything). It supports all USB drives and digital cameras. You just often cannot install the software that is provided with the device. The printer required visiting the website of the manufacturer and it worked also. I am optimistic that they will also improve in that area.
Thirdly, if I have problems with Windows, I am almost always stuck and cannot do much. In Ubuntu, googling for help always brings a solution to your problem.
In conclusion, I have Ubuntu installed on my desktop and netbook (Lenovo Ideapad) and I am very happy. For the latter, I even removed the existing Windows XP. I do no longer like the feeling of that OS.
by hellomad April 1, 2009 9:40 AM PDT
i guess in windows variety OS you can embed the service packs and updates and hot fixes, likewise in linux also you can update the packages and build a custom distro, no one is stopping you from doing so? i think i been fighting against local mac users since 2005, when my office colleague who is an uber mac fan/user was explaining a windows chap about setting up a DNS server and he ended up teaching nothing. he first wanted to set up the reverse zones and then he wanted to set up the forward zone. i happily said "YOU MAC BLOATS ARE AWSOME." since then i kind of developed a paranoia towards those MAC users WHO ARE NOT DEVELOPERS. they just shoot arrows/bullets/et al in the dark, if hit they celebrate else they will scratch windows/linux//bsd users where it itches and if we itch them back? they call us Windows/Linux/BSD/Unix users _____ (fill in the blanks, use imaginations as what words they use?) so it really doesnt matter what OS you use, if you really mean to keep it safe and secure? you will do a bit of research. nothing is perfect. i like darwin, but i hate MAC BLOATS, they are like those ice cubes in a half filled/empty vessel making ultimate noise.
so, if you want you can happily make a embedded updates, service packs, hotfixes, drivers, et al and then install and then with the latest updates already embedded you get to download the least of updates after the custom windows creation date. and you are done. and in a same way? with ubuntu/debian/redhat EL/fedora? you can make your custom cd with latest updates and bux fixes and security isses resolved and install, then you can skip the 85 updates which take ice ages on your cable router. so i guess i can happily garbage the users who does nothing bit nag like friggin women.
period.
and i guess this posts end up using word processor, where they put the words in a processor, turn the spinning wheel on then the words churn and they put them back from the mixie and back to a plate and serve it to a reader to relish how cool retardism actually tastes.
be good be good, to the womanhood.
Reply to this comment
by hellomad April 1, 2009 9:51 AM PDT
p.s. usb the universal serial bus are of 3 types as of now in 3 generetions. 1.0/1.1; 2.0; 3.0 so if you shove a 1.0/1.1 in a 2.0 up and above with backward compatibility? with 480 mb read speed and 120 mb write speed where the device bus is a 1.1/1.0 and the tower bus is 2.0 which gives a mac of 12 mb read transfer rate and 4 mb write you are on your own. go figure. i guess even apple.com cant help you with that. and they might ask you to spend 500 US$ more. and like what apple fan said, hit the mac store. i can happily be your monetary traffic guide and tell you how to go broke i mean sledge broke being IT savy. your call. well. you MAC NON-DEVELOPERS are the prime source of internet humor, and we love to get a thrilling laugh off you. tickle me more MAC users.
i decided to support mac non-devs they are the best source of laughter and also i can pull my life notepad out and write "LEARN FROM MAC NON-DEVS HOW NOT DO THOSE THINGS IN REAL LIFE."
Reply to this comment
by The_happy_switcher April 1, 2009 10:15 AM PDT
Now what? I'll tell you what: Back to the freakin' drawing board, that's what. Come on you worm writers, you are losing your touch. I expected big things this morning and was greatly disappointed.

Now Vega_Dan, don't go crying to Cnet to sic the FBI on my ass, now, ok?

APRIL FOOLS SUCKERS>
Reply to this comment
by CrashPad63 April 1, 2009 10:43 AM PDT
Applerocks, you are an idiot. Go back to that little existance called your life and dont come out again.
by The_happy_switcher April 1, 2009 11:05 AM PDT
@Crashpad: I'm guessing you're just a humorless person who's wound too tight from years of Windows usage and aggravation. Try and mellow a bit. Have beer every now then, maybe switch to Mac. You will live longer, too.
by Vegaman_Dan April 1, 2009 11:40 AM PDT
Wow... someone seriously got you upset there, AppleRocks. I think you might need a time out.

Give it up- it's not that big of a deal. Your every waking moment of your existance does not need to be dedicated to the obsession of discrediting all things Microsoft. Really- go out and take a walk, enjoy the nice weather, make new friends. You'll find your life much easier if you don't go so LALA over an operating system.
by The_happy_switcher April 1, 2009 11:57 AM PDT
I'm not upset, just disappointed there are so many humorless twits on Cnet boards.
by texaslabrat April 1, 2009 12:35 PM PDT
"I'm not upset, just disappointed there are so many humorless twits on Cnet boards."

Perhaps if you tried saying something funny....
by The_happy_switcher April 1, 2009 1:08 PM PDT
Whatever, sphincter boy.
by texaslabrat April 1, 2009 1:53 PM PDT
Your sophisticated wit overwhelms me. Good job!
by The_happy_switcher April 1, 2009 2:55 PM PDT
Anytime!
by Mark_Anderson April 2, 2009 3:12 AM PDT
AppleRocks had a twenty page polemic castigating Windows and extoling OS X which he's now had to bin since Conficker had a negligible impact on the Windows using community. As a result he's a bit upset.

Show a bit of kindness, lads. He has enough difficulties as it is.
by Seaspray0 April 1, 2009 10:52 AM PDT
Maybe you should ask your mom to take you out for some ice cream and cake.
Reply to this comment
by aka_tripleB April 1, 2009 12:55 PM PDT
It was Celine Dion. This is our one chance go put that show-boating Canadian wrench behind bars and I know someone is going to blow it.
Reply to this comment
by aka_tripleB April 1, 2009 1:00 PM PDT
I kid. I kid because I...well...I don't really care, but I do kid.
by TechGod_XD April 1, 2009 2:29 PM PDT
your wrong the downadup virus is very real created by an underground hacker late last year. Just because you are not infected doesn't mean its not real. Look out today and be careful on dangerous sites. Don't click ads that you know are to good to be true and people don't go looking at pr0n. You have been forewarned.
Reply to this comment
by Angmarr April 1, 2009 6:02 PM PDT
All these worms r all the same ... guess the creates, and some others got their little thrill

simple, cheap,practical precautions are all that needed to avoid this ****.
Reply to this comment
by The_happy_switcher April 2, 2009 8:24 AM PDT
Counting the seconds till the next worm wreaks havoc on the Windows community.
Reply to this comment
by troyoverton April 2, 2009 11:41 AM PDT
Is it just me, or does it sometimes seem that every thread somehow turns into Win vs. Lin vs. OSX or some derivative thereof?

Could someone please explain?
Reply to this comment
by DCAivan April 2, 2009 2:52 PM PDT
here is what kinda confuses me, everyone here says the conficker is on standby in a way. but as soon as it hit 12AM April 1st, one of my friends computer had over 2000 hack attempts in only 2 hours (mostly all happen in 1/2 hour). we both thought the Botnet that the conflicker made was what was trying to hack him (making senses)... but now im reading this and its saying that it did nothing.. are me and my friend experiencing something no one saw.... or is there some other attack that happen.
By the way, both of us had the Conficker before the attack, but got rid of it before the 4/1.
Reply to this comment
by tipoo_ April 3, 2009 7:34 AM PDT
Maybe they just want us to think it does nothing...
Reply to this comment
(35 Comments)
  • prev
  • 1
  • next
advertisement

S.F. hacker space: Heaven for the DIY set?

The Noisebridge hacker space offers sewing and Mandarin classes, soldering workshops, Internet-controlled front door access, and a server room with no door.
• Photos: Circuits, code, community

The browser battles go on and on

roundup From Firefox to IE and from Chrome to Opera and Safari, there's no sitting still for browser makers looking to keep their products fresh and competitive.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right