Article

2009-04-09 Science & Technology

Conficker worm wakes up, updates via P2P, drops payload

Archived material is restricted to Rantburg regulars and members. If you need access email fred.pruitt=at=gmail.com with your nick to be added to the members list. There is no charge to join Rantburg as a member.

Posted by GolfBravoUSMC 2009-04-09 14:25|| || Front Page|| [1 views ] Top

#1 I preface what I say with a reminder that I'm a complete computer idiot.

This is a test by some really bad guys.

Posted by Barbara Skolaut">Barbara Skolaut 2009-04-09 15:19|| 2009-04-09 15:19|| Front Page Top

#2 No point testing on this scale. This is the exploit, and the results will be very profitable for those responsible.

Posted by Iblis 2009-04-09 16:01|| 2009-04-09 16:01|| Front Page Top

#3 The worm also tries to connect to MySpace.com, MSN.com, eBay.com, CNN.com and AOL.com as a way to test that the computer has Internet connectivity, deletes all traces of itself in the host machine, and is set to shut down on May 3, according to the TrendLabs Malware Blog.

Wow.

Didn't even check for a gateway or nuthin'.

Just started a-pingin' away at known URLs...

Not even checking the output of telnet queries which would not have left much of a footprint.

Impressive check criteria for Internet connectivity.

It's no wonder this "worm" didn't make much of a splash.

Posted by badanov 2009-04-09 21:32|| http://www.freefirezone.org]">[http://www.freefirezone.org] 2009-04-09 21:32|| Front Page Top

23:20 Redneck Jim
22:39 Old Patriot
22:33 Rambler in Virginia
22:29 Halliburton - Mysterious Conspiracy Division
22:29 Rambler in Virginia
22:25 Alaska Paul
22:24 Mike N.
22:15 JohnQC
22:11 Deacon Blues
22:08 JohnQC
21:52 Pappy
21:32 badanov
21:27 Nimble Spemble
21:26 Kofi Flomotch5556
21:25 Frank G
21:24 Kofi Flomotch5556
21:23 Kofi Flomotch5556
21:16 Mike
21:13 Besoeker
21:03 logi_cal
20:55 JosephMendiola
20:51 JosephMendiola
20:23 mrp
20:05 KBK