Submit Your Article Forum Rules FAQ About Us
Search the forums:

Tech Support Team


Hello and Welcome to Tech Support Team! Before you can start posting and answering questions, you'll have to register. Registration is fast, simple and absolutely free! Feel free to browse through existing questions by choosing the forum you want to visit below.



Reply
  #1 (permalink)   Top
Old 2nd April 2009, 05:37 PM
Klunk's Avatar
TST Enthusiast
 
Join Date: Jul 2008, 279 posts.
Reputation: Klunk is on a distinguished road
Conflicker - a simple test for....

Here is a simple test you can do to see if a system is infected with the conflicker virus or variant thereof.

Conficker Eye Chart


Safe and happy surfin'
Klunk
Reply With Quote
  #2 (permalink)   Top
Old 2nd April 2009, 05:46 PM
Albert Lionheart's Avatar
TST Oracle
 
Join Date: Dec 2007, 8,001 posts.
Location: Market Haemorrhoids, Middle England
Reputation: Albert Lionheart is on a distinguished road
Are you sure this shouldn't have been posted yesterday, Klunk??
__________________
Confuse and Prosper.
Reply With Quote
  #3 (permalink)   Top
Old 2nd April 2009, 05:54 PM
Klunk's Avatar
TST Enthusiast
 
Join Date: Jul 2008, 279 posts.
Reputation: Klunk is on a distinguished road
Why?? What does the date and time of my posting this thread has anything to do with anything ?? The page I linked is not a hoax

The images in the chart are hosted on the security vendors site, this you will see if you look at the image properties, with the way conflicker works and blocks the known security sites then if you had conflicker then the images would not load because the site they are hosted on would be blocked by the virus.. You get my drift Albert???

Last edited by Klunk; 2nd April 2009 at 05:58 PM.
Reply With Quote
  #4 (permalink)   Top
Old 2nd April 2009, 06:36 PM
evilfantasy's Avatar
Security Team
 
Join Date: Dec 2007, 2,555 posts.
Location: Tulsa, OK
Reputation: evilfantasy will become famous soon enoughevilfantasy will become famous soon enough
I like the new images better. I blogged this yesterday and it was different.

The Conficker outbreak still hasn't happened. It got so much press they will probably wait until things calm down before releasing the new wave of attacks.
Attached Thumbnails
conflicker-simple-test-isee.jpg  
__________________
.

ƃolq s’ʎsɐʇuɐɟlıʌǝ
Reply With Quote
  #5 (permalink)   Top
Old 2nd April 2009, 06:50 PM
Klunk's Avatar
TST Enthusiast
 
Join Date: Jul 2008, 279 posts.
Reputation: Klunk is on a distinguished road
The 3 images/icons in the lower pane of chart are used as 'controls' as they are hosted on sites NOT blocked by conflicker
I guess the author of the chart likes to change these images from day to day, probably gives him/her something to do

I have to agree with you about the virus writers keeping their head down for a while until things die down and added code to counter the MS and other fixes to combat it.. then when people arent so aware and have forgotten whammo they will release a newer version of the virus and all the sob stories will start appearing all over the forums.
Reply With Quote
  #6 (permalink)   Top
Old 2nd April 2009, 06:54 PM
evilfantasy's Avatar
Security Team
 
Join Date: Dec 2007, 2,555 posts.
Location: Tulsa, OK
Reputation: evilfantasy will become famous soon enoughevilfantasy will become famous soon enough
They did a good job in scaring everyone. When the local news reports on it for 4 nights in a row you know it's a big deal.
__________________
.

ƃolq s’ʎsɐʇuɐɟlıʌǝ
Reply With Quote
  #7 (permalink)   Top
Old 2nd April 2009, 06:57 PM
Gunner's Avatar
TST Expert
 
Join Date: Aug 2008, 776 posts.
Reputation: Gunner is on a distinguished road
Y2K created much more furor. The sky didn't fall and neither did airplanes.
Reply With Quote
  #8 (permalink)   Top
Old 2nd April 2009, 07:01 PM
evilfantasy's Avatar
Security Team
 
Join Date: Dec 2007, 2,555 posts.
Location: Tulsa, OK
Reputation: evilfantasy will become famous soon enoughevilfantasy will become famous soon enough
Yea but Y2K was somewhat a controlled event. It might have happened but they could have fixed it pretty quick.

I think the security vendors pushed the fear more than it needed to be. They probably made a nice profit in the last few days...
__________________
.

ƃolq s’ʎsɐʇuɐɟlıʌǝ
Reply With Quote
  #9 (permalink)   Top
Old 2nd April 2009, 07:01 PM
Klunk's Avatar
TST Enthusiast
 
Join Date: Jul 2008, 279 posts.
Reputation: Klunk is on a distinguished road
Dont ya just love a good old bit of hype and scaremongering though..?? :LOL:
Reply With Quote
  #10 (permalink)   Top
Old 2nd April 2009, 07:19 PM
evilfantasy's Avatar
Security Team
 
Join Date: Dec 2007, 2,555 posts.
Location: Tulsa, OK
Reputation: evilfantasy will become famous soon enoughevilfantasy will become famous soon enough
Yea, I had fun with it a few times myself lol.

__________________
.

ƃolq s’ʎsɐʇuɐɟlıʌǝ
Reply With Quote
  #11 (permalink)   Top
Old 2nd April 2009, 07:21 PM
Albert Lionheart's Avatar
TST Oracle
 
Join Date: Dec 2007, 8,001 posts.
Location: Market Haemorrhoids, Middle England
Reputation: Albert Lionheart is on a distinguished road
Quote:
Originally Posted by Klunk View Post
Why?? What does the date and time of my posting this thread has anything to do with anything ?? The page I linked is not a hoax

The images in the chart are hosted on the security vendors site, this you will see if you look at the image properties, with the way conflicker works and blocks the known security sites then if you had conflicker then the images would not load because the site they are hosted on would be blocked by the virus.. You get my drift Albert???
Sorry Klunk - that looked just too much like an April fool for me to resist!
__________________
Confuse and Prosper.
Reply With Quote
  #12 (permalink)   Top
Old 2nd April 2009, 07:47 PM
Klunk's Avatar
TST Enthusiast
 
Join Date: Jul 2008, 279 posts.
Reputation: Klunk is on a distinguished road
Then you shouldnt take things on face value and actually take a little time to investigate things then you old goat
Reply With Quote
  #13 (permalink)   Top
Old 2nd April 2009, 07:51 PM
Gunner's Avatar
TST Expert
 
Join Date: Aug 2008, 776 posts.
Reputation: Gunner is on a distinguished road
Boys, boys, boys....settle down or else.
Reply With Quote
  #14 (permalink)   Top
Old 2nd April 2009, 07:55 PM
Albert Lionheart's Avatar
TST Oracle
 
Join Date: Dec 2007, 8,001 posts.
Location: Market Haemorrhoids, Middle England
Reputation: Albert Lionheart is on a distinguished road
Old goat is taken as a complement!
Before passing judgement I would like to see the results of that on an infected machine - but cannot be bothered to infect one just for the hell of it!
__________________
Confuse and Prosper.
Reply With Quote
  #15 (permalink)   Top
Old 2nd April 2009, 07:58 PM
evilfantasy's Avatar
Security Team
 
Join Date: Dec 2007, 2,555 posts.
Location: Tulsa, OK
Reputation: evilfantasy will become famous soon enoughevilfantasy will become famous soon enough
60 Minutes Conficker report.

__________________
.

ƃolq s’ʎsɐʇuɐɟlıʌǝ
Reply With Quote
  #16 (permalink)   Top
Old 2nd April 2009, 07:59 PM
Blackmirror's Avatar
TST Oracle
 
Join Date: Jul 2008, 8,171 posts.
Location: UK Norfolk .....
Reputation: Blackmirror is on a distinguished road
Conflicker is being hyped out of all proportion IMO
if you are up to date wih windows updates and antivirus sigs then its nothing but another anoying little virus
__________________
Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, chocolate in one hand, wine in the other, body thoroughly used up, totally worn out and screaming...
Damn, What a ride!!
Reply With Quote
  #17 (permalink)   Top
Old 2nd April 2009, 08:03 PM
Albert Lionheart's Avatar
TST Oracle
 
Join Date: Dec 2007, 8,001 posts.
Location: Market Haemorrhoids, Middle England
Reputation: Albert Lionheart is on a distinguished road
@ef = sorry, did I get the right one? That had no reference to confiker at all - just a lot of general blurb about hackers from Russia
__________________
Confuse and Prosper.
Reply With Quote
  #18 (permalink)   Top
Old 2nd April 2009, 08:08 PM
evilfantasy's Avatar
Security Team
 
Join Date: Dec 2007, 2,555 posts.
Location: Tulsa, OK
Reputation: evilfantasy will become famous soon enoughevilfantasy will become famous soon enough
That's what Conficker is. It's not a destructive virus, rather it is one of the highly sophisticated efforts to gain wealth through stealing private information from literally millions of computers.

It's not one of the one-dimensional pieces of "work" that some others authors write. This is why all of the scare mongering. While it might not happen as that say, it has the potential to do so, and has already done much damage. Microsoft has been releasing updates/patches for this threat for years now. It's not new. It is estimated that between 6 and 12 million computers have been effected at some point.

Here is a pretty good history of the different variations and what they do.

History of Conficker -Microsoft released a critical security update to resolve a vulnerability
__________________
.

ƃolq s’ʎsɐʇuɐɟlıʌǝ

Last edited by evilfantasy; 2nd April 2009 at 10:58 PM.
Reply With Quote
  #19 (permalink)   Top
Old 9th April 2009, 08:27 PM
evilfantasy's Avatar
Security Team
 
Join Date: Dec 2007, 2,555 posts.
Location: Tulsa, OK
Reputation: evilfantasy will become famous soon enoughevilfantasy will become famous soon enough
Full story

Quote:
The Conficker worm has started to update infected machines with a mystery package of data.

Computer security firms watching the malicious program noticed that it sprang into life late on 8 April.
__________________
.

ƃolq s’ʎsɐʇuɐɟlıʌǝ
Reply With Quote
  #20 (permalink)   Top
Old 9th April 2009, 08:31 PM
Blackmirror's Avatar
TST Oracle
 
Join Date: Jul 2008, 8,171 posts.
Location: UK Norfolk .....
Reputation: Blackmirror is on a distinguished road
Oh
looks like you could be busy Kevin
__________________
Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, chocolate in one hand, wine in the other, body thoroughly used up, totally worn out and screaming...
Damn, What a ride!!
Reply With Quote
Reply

Only registered members can participate in forum threads. You must register or log in to contribute.


Thread Tools

Forum Jump


All times are GMT. The time now is 12:27 PM.






Post A Question!
Useful Links
Main Menu
Home
Forum Rules
FAQ
About Us
Welcome Pack
Search the forums
TST Mobile
Contact Us
Send Message

These are the 8 most used thread tags
Tag Cloud
geforce modem monitor no ring response no signal nvidia soft modem win7