Warning to Windows Users: Conficker, IMPORTANT!

AGDee · #1 03-31-2009, 05:38 AM

If you use Windows and do not have it set to automatically update, you need to run security updates TODAY to help avoid any problems with the Conficker worm. To run windows updates, simply open Internet Explorer, go to Tools, Windows Updates and follow all the prompts to update your PC.

Conficker is a worm that has infected over 10,000,000 PCs world wide but it hasn't been doing anything yet except contacting it's "host" for instructions. It is believed that on April 1st (tomorrow), the host will be giving "instructions" to PCs all over the world to do "something" but nobody knows for sure what. There is speculation that it will pull passwords out of cookies for banking sites, there is speculation that all of the PCs will be told to "attack" certain web sites, there is lots of speculation and nobody knows exactly what it will do. Conficker has prevented some people from being able to reach www.mcafee.com and www.symantec.com to update virus scan files or download anti-virus software.

Conficker has been infecting PCs through websites, some that we generally "trust" such as Ebay and SouthWest Airlines. It wouldn't hurt to run a full virus scan with updated virus scan files as well, but it primarily exploits a Windows security hole that is fixed with updates from Microsoft. It may bring whole corporations down as it is believed that the majority of PCs affected are actually business PCs where the IT folks do not have Windows Updates running automatically.

This is NOT a hoax. http://news.cnet.com/8301-1009_3-10207852-83.html
If you've been watching news at all, you've probably heard about this. 60 Minutes did a piece about it on Sunday and all the major news networks have been warning people.

Protect yourselves folks!

ETA: The blackout of 2003 that affected the whole northeast portion of the US was caused by a similar worm that brought down the PCs that were monitoring our electrical system. I'm not typically an alarmist, but we have become so dependent on computer systems and the internet that a worm like this could do real damage. Hopefully by getting the word out, all problems will be eliminated.

aephi alum · #2 03-31-2009, 10:50 AM

Quote:

Originally Posted by AGDee

If you use Windows and do not have it set to automatically update, you need to run security updates TODAY to help avoid any problems with the Conficker worm. To run windows updates, simply open Internet Explorer, go to Tools, Windows Updates and follow all the prompts to update your PC.

Thanks for the warning.

BTW, if you run Vista, you must run Windows Update from the Control Panel. If you try to run Windows Update through IE, you will be told to use Control Panel.

Kappamd · #3 03-31-2009, 01:32 PM

Is the update new, or was it released earlier? I don't have any new Important updates, so I'm wondering if I already got it.

AlwaysSAI · #4 03-31-2009, 01:33 PM

Thanks AGDee! I just updated!

MexicanMami0286 · #5 03-31-2009, 02:45 PM

They just swept my PC for it at work. I'm glad I have a Mac at home.

Smile_Awhile · #6 03-31-2009, 02:51 PM

I'm on a Mac, but I've read that if you downloaded the security update for March, you should be OK.

As an extra precaution, I'd run your anti-virus software too.

DaemonSeid · #7 03-31-2009, 02:56 PM

Quote:

Originally Posted by Kappamd

Is the update new, or was it released earlier? I don't have any new Important updates, so I'm wondering if I already got it.

It may have autoinstalled.

Kappamd · #8 03-31-2009, 03:19 PM

Quote:

Originally Posted by DaemonSeid

It may have autoinstalled.

That's what I figured.

AGDee · #9 03-31-2009, 04:24 PM

The patch was originally released in October so if you patch regularly, you should be good

Another patch that came out with the March release will help keep a USB drive from getting infected if your PC is already infected.

KSig RC · #10 03-31-2009, 04:32 PM

Also, Conficker has been transmitting for months, and it's most likely just going to change parameters to start a new set of pop-ups or a DDoS attack . . . you should get checked, but it likely isn't the robot menace 60 Minutes indicated.

MysticCat · #11 03-31-2009, 04:39 PM

Quote:

Originally Posted by KSig RC

. . . but it likely isn't the robot menace 60 Minutes indicated.

Are you suggesting that 60 Minutes is being alarmist?! Perish the thought!

KSig RC · #12 03-31-2009, 05:34 PM

Quote:

Originally Posted by MysticCat

Are you suggesting that 60 Minutes is being alarmist?! Perish the thought!

I KNOW!

Plus, why would I listen to what 75 year olds have to say about modern computing technology? I mean, seriously . . .

AGDee · #13 03-31-2009, 09:38 PM

The problem is, we really don't know what it's going to do. It may end up being no big deal at all, but better safe than sorry, right? The variants have become more and more complex. It's a pretty fascinating worm for us IT geeks. The theories are that it's likely to go after big corporate systems in search of mass numbers of credit card numbers, social security numbers, etc. for financial gain.

ETA: For all we know, it's going to send out a pop up that says "April Fools!"

AGDee · #14 03-31-2009, 09:39 PM

Quote:

Originally Posted by aephi alum

Thanks for the warning.

BTW, if you run Vista, you must run Windows Update from the Control Panel. If you try to run Windows Update through IE, you will be told to use Control Panel.

Thanks, we aren't working with Vista systems yet so I'm not familiar with it at all.

honeychile · #15 03-31-2009, 10:01 PM

Wouldn't it be funny if this is an April Fool's joke on all of us?