| Forum Home | ||||
| PC World Chat | ||||
| Thread ID: 98549 | 2009-03-28 21:18:00 | Make Sure Your PC Is Secure On April 1st | Trev (427) | PC World Chat |
| Post ID | Timestamp | Content | User | ||
| 760317 | 2009-04-09 23:19:00 | Jamuz, that web site: www.confickerworkinggroup.org is working ok for me right now. |
zqwerty (97) | ||
| 760318 | 2009-04-10 05:48:00 | It's 21:37 Thursday April 9th California time here and this just rolled into my sniffer a couple of minutes ago: Symantec suggests that PCs infected by earlier variants are getting updates. On April 8, 2009 we discovered a new sample that is a slightly modified version of the original W32.Downadup worm. The worm previously updated its functionality with the .C variant which installed on top of the .B variant infections, and we are now seeing the same type of update happening on top of the .A variant infections. This new sample reintroduces the MS08-067 exploit vector, which was removed in the .C variant. It includes previously unseen self-removal functionality to remove itself from the infected host on May 3, 2009. The new sample includes a slightly different list of URLs used to obtain the IP address of the infected host and also reaches out to a new list of high-profile domains to confirm the current date. When reaching out to these domains the threat is not exploiting any weakness nor downloading any code. We have also observed a possible connection to W32.Waledac, one of the most active spam bots, and have some circumstantial evidence that the two may be linked with W32.Downadup.C distributing W32.Waledac. W32.Waledac steals sensitive information, turns computers into spam zombies, and establishes a back door remote access. The latest variant of Conficker uses randomly generated ports between the ranges of 1024 and 10000 to communicate and propagate. |
SurferJoe46 (51) | ||
| 760319 | 2009-04-10 06:03:00 | blog.wired.com | zqwerty (97) | ||
| 760320 | 2009-04-10 07:44:00 | Jamuz, that web site: www.confickerworkinggroup.org is working ok for me right now. Cheers :) |
Renmoo (66) | ||
| 1 2 3 4 | |||||