Freaked out for the April Fools virus

[rna_duelers]

My computer refused to start up,and I found a worm on it in safe mode so I guess I caught it beat it.

[Ragnarok]

Indeed, I propose a combination of Fnord's advice and MrCrowley's post.
If it hasn't happened yet, ask MrC if it's going to happen tomorrow.

You know, you guys in the US should pick up on that 17-20 hour time difference during major sporting events. Have MrC check the news sites so you know the end result in advance - you could make a total killing in the betting shops.

@RNA: Conficker is supposed to disable safe mode. If you've been able to activate it, you've not got the worm.

[Carlman]

combusing

Your computer is using a comb? REALLY?

Been into the bitters have you.

just a coupl a cold 1s...

[ALIHISGREAT]

well hopefully i don't have it... i've downloaded all the recent microsoft updates as they have come out so... (will Mcafee pick it up?)

[rna_duelers]

Well I couldn't get safe mode up to begin,but I got around it.I'm sceptical of it being real though,it's most probably just a fact of hype and a virus hitting me now.

[inonickname]

Computer is only used by me plus I do nothing that malicious. Have the best security software and firewall available, plus a fully updated coputer..

I'll let you guys know if anything comes up..probably rubbish

[psycix]

Computer is only used by me plus I do nothing that malicious. Have the best security software and firewall available, plus a fully updated coputer..

I have no firewall on, no antivirus and no antispyware. The only protection is that I am behind a router.
For some reason, I have almost no viruses or spyware at all. I once checked a system with a one year old install of winXP, and it came up with no more then a bunch of tracking cookies.
Just use your mind and know where you click on and then you'll be fine. FW's and scanners do not grant immunity against attacks, it just helps to intercept human stupidity.

Nothing can download itself onto your PC and run itself out of its own. Something, either being another program or a human, has to give the order to download and run it.
Keeping your software updated helps preventing attacks through some leaks that were in other versions. Browsers have bugs which can cause them to download and run a virus when they read a certain script. Usually these bugs are fixed ASAP when they are discovered.



----------


EDIT:
LOL youtube turns video's upside down today! (Just like one april 1st virus)
They say its a new layout.
You can get back to the normal layout in a click or you can get tips to get used with the new layout.
Their tips:
-Turn monitor upside down
-Turn head upside down
-Go live in austrailia
Kinda awesome that youtube did that.

[SEAKING9006]

Arrg, the Conficker be old-hat. She be naught but an annoyin' wench, and an easily defeated one she be. We be in no more danger than yesterday.

[THUNDERLORD]

I just go to the library and open e-mail etc. if I'm worried.
Obama can pay for fixing it.

People who generate computer viruses are like people who mess up public bathrooms IMO...
I wish there was a way to Kill 'em all!

[Carlman]

EDIT:
LOL youtube turns video's upside down today! (Just like one april 1st virus)
They say its a new layout.
You can get back to the normal layout in a click or you can get tips to get used with the new layout.
Their tips:
-Turn monitor upside down
-Turn head upside down
-Go live in austrailia
Kinda awesome that youtube did that.

i noticed that oh about 23 hours ago lol google has a new product too...

[rcman50166]

Well it may be a little late at this point, but here's the email I got as far as how to deal with it.

The Office of Information Technology requests ALL students with a Windows based machine please read this document and follow the links provided to protect yourself from the pending Conflickr Worm. If a system connected to the university network is detected with this behavior it will be disconnected from the network and you will need to bring your computer to the Student Support Office in Echlin Hall for cleaning. We continue to encourage all students to maintain antivirus protection on your computer.

Thank you

To download the patch: http://www.microsoft.com/technet/securi ... 8-067.mspx

To remove the possible infection: http://www.microsoft.com/security/malwa ... fault.mspx

** Critical Notice **

April 1st Confickr Worm Threat

Over 3 million unpatched machines have been infected with malicious software as a result of the Confickr worm. Next Wednesday – April Fools' Day – millions of computers that have already been infected by the Confickr worm, also known as "bots", will be used to receive orders from controlling machines and possibly leveraged in malicious activity. Once these orders are received, the infected computers may be used to send out malware, e–mail scams/spam, viruses, or may even be used to steal information from the affected host. The computer must already be infected by the Confickr worm in order for it to be used in this potential threat that is to occur on April 1st.

If you are unsure if your Windows machine is infected by the Confickr worm, please use an anti–virus to scan your machine. Anti–virus signatures to detect Confickr worm activity are available.

** Please note, Windows machines that are patched with the MS08–067 update are not affected by this threat. This patch was released October 2008**

The Confickr worm (aka DownAdUp/DownUp/Kido) spreads itself primarily via a buffer overflow vulnerability in the Server Service on Windows based computers. The worm uses a specially crafted RPC request to execute its coding on the target computer. Once the worm is executed on the system, it disables a number of system services such as Windows Automatic Updates, Windows Security Center, Windows Defender, Windows Error Reporting, or possibly other anti–malware/virus protection programs. The worm also receives orders from a main server that can tell the worm to download more malware, steal information, or spread to other systems. Some of the system services/processes to which Confickr worm is known to attach are svchost.exe, explorer.exe, and services.exe.

** If you do not have the MS08–067 patch installed, it can be downloaded from Microsoft via the link below or by using Windows Update. If your Windows machine is infected by the Confickr worm you can download the Microsoft Removal tool below the Security Bulletin link. **

http://www.microsoft.com/technet/securi ... 8–067.mspx

http://www.microsoft.com/security/malwa ... fault.mspx

It is important to note that propagation methods for this worm have been detectable on the network since October 2008, when the patch was released. Other potentially undetectable propagation methods include any writable media plugged into an infected system such as a USB drive.

Greg Bartholomew
Director of Networking/Systems Operations
Office of Information Technology
University of New Haven
300 Boston Post Rd
West Haven, CT 06516
(203)932-7059
(203) 932-7075 fax
UNH - A leader in Experiential Education

[SEAKING9006]

Aww shit, I used a USB drive to hold some programming work I'm doing. And I used it at school this morning.

[judgment_arms]

...Perhaps we won't launch it.

Yeah, I rolled out of bed late and decided that since the day's already half over, why bother...

World Domination can wait till next year.

[covey12]

I just go to the library and open e-mail etc. if I'm worried.
Obama can pay for fixing it.

People who generate computer viruses are like people who mess up public bathrooms IMO...
I wish there was a way to Kill 'em all!

lol obama wouldnt pay for crap unless its for him

[john bunsenburner]

Well i will take it positively, if it shoudl happen i have excuses for my homework...hahaha