SRL Archive - News and General

April 1st Virus


krisg05

2009-03-27 22:23:13

Your thoughts?
http://edition.cnn.com/2009/TECH/03/24/conficker.computer.worm/index.html
everyone make sure your pc are up to date
this is going be one hell of a painful joke

legendaryhero90

2009-03-27 22:25:27

reformat.

nothing to it really.

honestly it doesnt sound all that bad.

BKNYKavkaz

2009-03-27 22:26:32

EDIT: NVM, did not thoroughly read it. Anyways, ye this is old news. Microsoft found about able the vulnerability in their os months ago. They just cant do anything about it lol. This should be interesting.

xiaoina

2009-03-28 00:18:11

there's a bounty for the ip adress of the person behinde the virus.something like 200,000$ us from the CIA

krisg05

2009-03-28 01:00:50

lol it $250,000 and it for info for the lead to there capture and it from Microsoft i going lol so hard if it just comes up saying April fools you noobs
yer plus alot of ppl dont know about who i told to so im getting the word out most worrying thing is they dno what it goingbe used for

senrath

2009-03-28 01:05:14

Um, guys? They released a patch for this vulnerability a while ago. And there are plenty of removal tools available.

From: krisg05
lol it $250,000 and it for info for the lead to there capture and it from Microsoft i going lol so hard if it just comes up saying April fools you noobs

It's not a joke. The bounty has been in place since February.

GoF

2009-03-30 14:17:56

I'll lol so hard if millions and millions of people get their pc messed up on april 1st. If this is some ingenious april fools prank I hope the creator has some sense of humor.

Also, I really doubt they'll ever catch the guy, most likely some russian guy behind 50 proxies.

NiiX

2009-03-30 15:03:19

From: GoF
I'll lol so hard if millions and millions of people get their pc messed up on april 1st. If this is some ingenious april fools prank I hope the creator has some sense of humor.

Also, I really doubt they'll ever catch the guy, most likely some russian guy behind 50 proxies.


50000 proxys to be exact, once its activated ofc :D

This is a great virus in my opinion, I am not worried about getting infected at all, I would just format, however I cant see how this virus cant be caught WHEN the police / investigators HAVE the code from the first release, and they even got the source from it, how hard can it be to alter AVG or Norton to see those codes, really..

Dervish

2009-03-30 15:04:35

From: GoF
I'll lol so hard if millions and millions of people get their pc messed up on april 1st. If this is some ingenious april fools prank I hope the creator has some sense of humor.

Also, I really doubt they'll ever catch the guy, most likely some russian guy behind 50 proxies.


Probly chenese ? :p

BIMZ

2009-03-30 17:52:52

From: Dr D. Dervish
Probly chenese ? :p


L2Spell.

Its kind of sad. My virus protection just turned out of date a few days ago :eek:.

NiiX

2009-03-31 02:05:29

From: BIMZ
L2Spell.

Its kind of sad. My virus protection just turned out of date a few days ago :eek:.


Update?

bullzeye95

2009-03-31 08:22:57

http://it.slashdot.org/article.pl?sid=09/03/28/2150259

Widget

2009-03-31 09:12:56

I'd actually laugh if the update on April 1st thing was in and of itself an April Fool's joke :)

I doubt I have it, but I may as well just stay on Ubuntu tomorrow anyway, I'm gonna update to the 9.04 alpha

Naike

2009-03-31 09:13:04

Don't open anything you shouldn't = No viruses :)

Gu3st...

2009-03-31 10:49:57

If you downloaded any updates from Microsoft in March then you'll be protected.
No worries :)

Mudkips

2009-03-31 12:47:56

I am running Ubuntu. Works like a charm.

Bobarkinator

2009-03-31 17:31:09

From: Widget
I'd actually laugh if the update on April 1st thing was in and of itself an April Fool's joke :)

I doubt I have it, but I may as well just stay on Ubuntu tomorrow anyway, I'm gonna update to the 9.04 alpha


9.04 is beta now is it not?

Sinking Poop

2009-03-31 18:09:55

I guarantee it's from the maker of AV09, a program the gets into your computer via cookies. If I am right about this being a AV09 you will see an very annoying pop-up acting like windows security. Just bottom line, Don't download unless it's safe. The AV virus caused me to buy a new hard drive for my computer. Just watch out.
EDIT:BLOCK ALL SITES LISTED
The worm connects to the following URLs to obtain IP address of the compromised computer:

* [http://]www.getmyip.org
* [http://]getmyip.co.uk
* [http://]checkip.dyndns.org

Harry

2009-03-31 18:25:20

From: Sinking Poop
I guarantee it's from the maker of AV09, a program the gets into your computer via cookies. If I am right about this being a AV09 you will see an very annoying pop-up acting like windows security. Just bottom line, Don't download unless it's safe. The AV virus caused me to buy a new hard drive for my computer. Just watch out.
EDIT:BLOCK ALL SITES LISTED
The worm connects to the following URLs to obtain IP address of the compromised computer:

* [http://]www.getmyip.org
* [http://]getmyip.co.uk
* [http://]checkip.dyndns.org

Those are legit sites.. you shouldn't block them. Also, none of them even attempt to store cookies on your PC.

And also, you can not get a cookie virus on Firefox. Get off IE.

BKNYKavkaz

2009-03-31 18:52:00

From: Harry
Those are legit sites.. you shouldn't block them. Also, none of them even attempt to store cookies on your PC.

And also, you can not get a cookie virus on Firefox. Get off IE.


-.- He meant that the virus uses those legit sites to obtain ip of the victim. Does not necessarily mean they are bad. And there is no such thing as a cookie virus. Only cookie scripts and xss etc.Useing javascript and etc. Both IE and FF are vulnerable. Depends how good the coder is. The ones that are most effective are the ones that are virtually undetectble. However, people that can code such exploits are smart enough to not go over the edge. They use them cpa and etc. Theres a lot more to it obviously…but if you wanted a summary. You got it.

Nose Smasher

2009-03-31 21:18:48

So basically if you have it now, you're F'ed, otherwise you're good? Whole thing sounds stupid… Some narb guy releases a worm, FED's intercept the code, and find out that he added notes in the code about what dates they were going to be released? ROFL? Maybe I have it cuz my accounts have gettin haxed lately on RS… Z0MG! I got it! It's those Chinese getting back at Jagex! They're Haxzin everyone to get their RS info and Bot on every single RS account in the world! rofl… ok I'm bored now… Would be VERY Funny if it was all a big joke :p

[-jesus-]

2009-03-31 21:21:49

From: nose_smasher
So basically if you have it now, you're F'ed, otherwise you're good? Whole thing sounds stupid… Some narb guy releases a worm, FED's intercept the code, and find out that he added notes in the code about what dates they were going to be released? ROFL? Maybe I have it cuz my accounts have gettin haxed lately on RS… Z0MG! I got it! It's those Chinese getting back at Jagex! They're Haxzin everyone to get their RS info and Bot on every single RS account in the world! rofl… ok I'm bored now… Would be VERY Funny if it was all a big joke :p


You sound incredibly stupid.

Sinking Poop

2009-03-31 21:41:49

What's weird about this is how they discovered when it is spouse to be launched. It's the CONfictor. Maybe they are conning us into a fiction story? Well I'm sure it's real because of the previous versions

ZaSz

2009-03-31 22:37:30

From: Sinking Poop
What's weird about this is how they discovered when it is spouse to be launched. It's the CONfictor. Maybe they are conning us into a fiction story? Well I'm sure it's real because of the previous versions


Its Conficker, and btw to all, it ONLY TARGETS WINDOWS BASED OS's!!!! (I got vista :eek:)

Nose Smasher

2009-03-31 22:58:26

From: [-jesus-]
You sound incredibly stupid.

Blame it on the Goose
Got you feeling loose
Blame it on Petron
Got you in the zone
Blame it on the aaa-aa-aaa-al-alcohol

This whole worm thing is stupid…

Sinking Poop

2009-03-31 23:06:55

Crossing my fingers that what I did is enough.
Installed:
March Updates
Mcafee
Malwarebytes
Dwnup Remover
All of these I got off of yahoo.com

bullzeye95

2009-03-31 23:19:42

From: Sinking Poop
The AV virus caused me to buy a new hard drive for my computer.


Epic waste of money. You didn't need a new HDD..

MetalancA

2009-03-31 23:50:27

I might be missing something here, but couldn't you just unplug your computer from the internet on April 1st to avoid the entire threat?

Sinking Poop

2009-03-31 23:53:17

No if it's on your computer it will run right when you turn on, I pray I don't have the virus

Tniffoc

2009-04-01 00:27:02

I havn't seen any real proof yet, so I think it's April fools joke. :)

Da 0wner

2009-04-01 01:04:16

Like the second post, reformat :). I doubt that I have it however, as I just reformatted recently.

NiiX

2009-04-01 02:17:36

Err, I am running XP and its 1st, where is the virus xD

Da 0wner

2009-04-01 02:28:48

Are you sure you even had it? And are you sure they are on East Coast time or w/e you are on. It's 11:17 PM GMT (-8). I'm in Cali.

faster789

2009-04-01 02:54:52

It's called… APRIL FOOLS :D

I got nothing, yep it's one lame joke.

senrath

2009-04-01 03:10:31

From: faster789
It's called… APRIL FOOLS :D

I got nothing, yep it's one lame joke.


Um, it's not a joke. It's not as bad as people made it out to be, but Conficker is a real worm. And just because you didn't get anything, doesn't mean it didn't affect other people. Saying that would be like saying that cancer isn't real because you don't have it.

Gu3st...

2009-04-01 11:39:08

From: Zyt3x
If you downloaded any updates from Microsoft in March then you'll be protected.
No worries :)

Nobody saw my post?! -.-"

golden garys

2009-04-01 17:15:50

It's an amazing virus they've made you must admit, but is rather anoying to think "Oh joy my computer maybe infected by this :/". But hats off to them for getting away with it (:.

krisg05

2009-04-01 20:16:37

Conficker.C went live today (Actually yesterday due to timezones) but no major consequences have been noticed yet. [No DDoS's etc] All that happened today was a change in the worm's update mechanism (Increase of possible URLs from which it can receive instructions to 50,000) You had to have been infected by Conficker A or B before in order for C to have a noticeable effect. (Most likely a slower home network as the worm dials home) [Access to a lot of security vendor sites will also no longer be possible]

It's just another example of an ignorant, uneducated public either overreacting or under-reacting. [Panic is what I meant by overreacting: "Your computer will be destroyed April 1st" etc] [Not doing anything is what I mean by under-reacting] Of course, the media hype actually somewhat helped this time by pushing businesses and users to update anti-viruses and patch their computers. [Still was part of the panic problem] Too much attention has dented the worm's impact somewhat.

And as before when major worms struck, Linux and Mac users kick back, relax, and chuckle. ;)

Harry

2009-04-01 21:01:26

This isn't major at all IMO. It is just a worm that someone wrote, found a few stupid people working at big networks, then planted it. To actually get the worm, you need to be very stupid, to be honest.

ZaSz

2009-04-01 21:05:42

Btw, its scheduled to update the 1st. Doesn't mean the end of the worlds going to happen today. For all we know it could be 2010 before it attacks. Or never.

senrath

2009-04-01 22:03:16

From: Harry
This isn't major at all IMO. It is just a worm that someone wrote, found a few stupid people working at big networks, then planted it. To actually get the worm, you need to be very stupid, to be honest.


Especially since the exploit it uses was patched a while ago. Meaning that only people who don't update their computers could get it.

darkuser

2009-04-03 15:15:32

made sure i had all security patches march 31st, april 1st came and nothing like it was said all you have to do is update.