What has been described as a day of epic struggle appears to be starting quietly, with Conficker day setting in for China and S. Korea, two of the nations maintaining reportedly high Conficker infection volumes (the worm has spread to potentially a few million systems). South Korean researchers have reported that it is well into morning in Seoul, and no massive network disruption or change in infected systems has occured yet due to infected systems discovering that it is April 1st (a hard-coded date set for a recent variant to begin contacting a larger list of potential web sites).
Top Conficker infected countries to watch appear to be
1. China
2. Brazil
3. Russia
4. India
5. Argentina
If you are reading this post, your system most likely is not infected with Conficker (Conficker denies infected host systems from visiting this blog). Please update your Windows system and its software regularly with patches from the Microsoft Update site, use decent passwords for your Windows user accounts other than “1234″, install a protective set of security products (behavioral protection, firewall, AV, etc), and do not act promiscuously with your usb-based storage or network drives and shares.
Continue on with your online activity, descriptions of damaging behavior other than failed rogueware downloads by the Conficker worm will be posted here whenever they may occur.
We have the free home version of ThreatFire and I can read this blog,
but I can’t access any of the mircrosoft website pages about conflicker.
I’ve used Google searches to locate URLs and not one of these will load
for me.
http://www.microsoft.com/security/portal/Entry.aspx?Name=Win32/Conficker
http://www.microsoft.com/security/portal/Entry.aspx?Name=Win32/Conficker
http://www.microsoft.com/Presspass/press/2009/feb09/02-12ConfickerPR.mspx
http://www.microsoft.com/security/portal/Entry.aspx?Name=Worm:Win32/Conficker.A
http://www.microsoft.com/security/portal/Entry.aspx?Name=Worm:Win32/Conficker.B
http://www.microsoft.com/security/portal/Entry.aspx?Name=Worm:Win32/Conficker.C
http://www.microsoft.com/security/portal/Entry.aspx?name=Worm:Win32/Conficker.D
http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356
Is it possible their servers are overloaded or do you think this computer is
infected?
Hi Laura-
I haven’t yet seen or heard of a Conficker variant that would allow you to visit “threat” sites and not Microsoft sites. It’s possible that it’s a variant that I haven’t seen yet.
There are other sites that the malware blocks: http://www.threatexpert.com, pctools.com.
If visits to those sites are blocked, you may want to try to visit gmer.net and download an application hosted there called gmer. If you cannot, can I try contacting you directly?