Supposedly 12 million computers have been infected with a new worm set to activate on April 1st. At that time it will turn the computers into a giant peer-to-peer network. The purpose of this network is currently unkown according to the NY Times.

Any IT people out there know what's really going on?

Conficker Worm article

-Blast

http://www.youtube.com/watch?v=5oCHxB8d20s

You can break the Internet!! Well at least some one is having a darn good attempt at trying to do it...

Blast,

This is an example of when the "due diligence" of a little prior planning pays off.

For expert information on the Conficker worm and how to protect yourself from it, you can read through the Internet Storm Center diary about it. They have links to information on protecting yourself and on how to remove the worm from a computer. This is a reputable and authoritative source for information.

I haven't had time to digest it all, but my _opinion_ is that people who have a decent anti-virus solution in place and up-to-date are not at great risk. The 12 million infected computers are owned by people who aren't paying attention. They may regret it.

Dennis

Microsoft has issued a tool to plug the leak so to speak that would confound the worm. Technet.microsoft.com has a pretty good article about the whole thing, and what it does. They are also offering a $250,000 reward for infomration leading to the arrest of those responsible for making/deploying the virus. There are presently two known variants, Conficker A and B. They exploit the same leak in Windows, mostly in enterprise systems, so this was targeted mostly towards server lans, but it will infect anything that isn't already plugged off.

Most enterprise systems subscribe to the MSRT (Microsoft's malicious software removal tool service) and probably already have the security update that was issued last October. If you are concerned, here's the website that has the update:

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

While this worm may be rendered inert using antivirus and security update tools on individual machines, there could still be a lot of unprotected servers and workstations out there that will generate a lot of extraneous internet traffic if the worm activates, possibly slowing down the system a bit. I guess we will see what happens next wednesday.

Here's another good website from Microsoft about the worm and what it does:

http://www.microsoft.com/protect/computer/viruses/worms/conficker.mspx

Thanks, guys! Being a Mac-user I'm not too worried. However the DW has an extensive network of Windows machines strung up through the house and she's a bit lax in security. It drives me up a wall...

Time for some stealth patching...

-Blast

If the antivirus updates have been running regularly, there should not be a problem. Make sure they all have the latest update (in the last day or two) and you're golden.

Like airballrad said "IF" your anti virus software is running regularly you should be fine. Both Nortons and Microsoft state "As long as your anti-virus software is up and running you should be fine"


Mike

In a nutshell, the only reason why a computer is at risk is neglect. If you've maintained your security and/or OS patches, it should be fine for you. Then again, it is amazing the number of people who step out in front of cars without looking every day.

More info from cnet: Conficker time bomb ticks, but don't expect boom