NOW and THEN

A BICOASTAL PERSPECTIVE

Hawley Roddick

Hawley Roddick
Location
Monterey, California, USA
Birthday
February 13
Title
Author
Bio
Hawley Roddick is a transplanted New Yorker who has set down roots in California where she writes promiscuously (books, blogs, Facebook, Twitter). She also co-authors memoirs for private clients who recognize family history as a treasure. The insatiably curious can learn more at http://www.hawleyroddick.com

Editor’s Pick
MARCH 29, 2009 4:45PM

Conficker Worm Set to Attack Our PCs, $250,000 Bounty Set

Rate: 20 Flag

The National Business Review predicts it will be “the biggest [computer] virus attack the world has ever seen.” (Chris Keall, Thursday January 22 2009).

Our personal or business computers may be among the estimated ten million computers already infected with the Conficker C worm, which is set for activation on April Fool’s Day. The virus is so feared that Microsoft has placed a $250,000 bounty on the heads of the malware malfeasants whose brilliant if twisted masterminds are behind Conficker.

But wait. It gets worse. Conficker C spreads through peer-to-peer files and even USB thumb drives. It can render security software and firewalls impotent while blocking patches and automatic updates. In nontechnical terms, it can probably take computers hostage and hold them in solitary confinement, isolating them from sources of help and repair.

Unfortunately no one except the perpetrators knows exactly what damage Conficker C will do. We know only that on Wednesday, bad guys at a secret location are likely to take control of all infected computers and have their way with them. Their motivation is assumed to be similar to that of the corporate and government villains who brought down our economy: greed. The big difference is that while they are equally immoral, the Conficker guys are not incompetent.

The good-ish news is that techies have developed probable protection. Not being a techie myself, I imagine this as a giant condom for hard drives not yet infected as well as a morning-after pill for millions of computers into which Conficker C has already burrowed and where it awaits its horrible mutant birth on April 1st.

Although Conficker’s megalomaniacal developers probably aren’t focused on home PCs, if the slick worm launches in our PCs, hackers can steal our passwords, banking information, and other confidential information.

Luckily, personal disaster is not necessarily inevitable. If we’re super vigilant before April 1st about downloading all the latest Windows patches and about making sure our antivirus and spyware programs are up to date, our own computers are probably safe. The most useful article about how to protect our PCs that I found is at http://blogs.zdnet.com/perlow/?p=9739. After reading it, I relaxed about my free Avast security program, and I downloaded updates at the Microsoft site and then installed free spyware.

But large networks are expected to be at ground zero on April 1st. If the Conficker’s perverted perps take control of large government, business, and financial networks (as some articles Google found predict), the result could be too ghastly to contemplate. And such disparate victims as the United Kingdom Houses of Parliament and the Houston Municipal Courts have already found Conficker C in their IT systems.

The first Conficker worm (Conficker A) appeared in October 2008. Conficker B arrived in December, but experts think these Conficker worms were child’s play compared to the new sibling. Conficker worms are unique in that they take advantage of a Microsoft flaw that Microsoft has patched and continues to patch. Meanwhile the virus looks for computers that haven’t been patched effectively.

Suspense builds as April Fool’s Day nears, because no one knows what the virus will do (if anything), and FUD (fear, uncertainty, and doubt) around this possible event are causing an uproar that was only compounded when Symantec warned that even searching for information about Conficker could attract it to your computer. Boy, if that’s true, am I in trouble.

And just one more thing: Mac users, no smug smiles, please.

 

Your tags:

TIP:

Enter the amount, and click "Tip" to submit!
Recipient's email address:
Personal message (optional):

Your email address:

Comments

Type your comment below:
Wouldn't it be interesting to interview the creators of Conficker and find out what it's like inside their heads?
It would definitely be interesting to speak with them, Hawley. The economy is in enough trouble without a blow like this. Thanks for posting this - I hadn't heard of it.
thanks for the heads up hawley, and yes, it'd be interesting to get inside their heads, right after i break 'em with a tire tool:)
Hawley, I hadn't heard about this virus before reading your post. Once again I have to say to these hackers "get a life." Imagine if they put their skills to a good purpose like making web sites for non-profit organizations and the like. I mostly use a Mac, but with those being more popular now than in the past I have read that Mac users also can expect trouble in the future.
Me? Smiling smugly? Why, the very idea!
Hey, maybe the whole thing is an April Fool's joke.
I would be very interested to know why these guys/gals do what they do. Fame and glory I suppose, even if anonymous. Thanks for warning - I will pass it on to husband, our resident techie. Really grateful he will have a heads up at work.
The SOB Hackers that put these virus out there. I hate it. I have a disability and need my computer to help daily. Plus, some of us work online. If your computer goes down you don't make money. I really hope that dakinidancer is right and it is an April Fools joke. My computer got so messed up from a trojan virus and we had to replace the hard drive. My retire is not much and many more of these and I be one of the people with the sign "will work for food." Thanks for Sharing. Totzaon
I'll see y'all on Thursday with double blogs.

My security software is set to "Kill". I can't even go to just any sites. But that's no guarantee that something got in. If anything squidgy happens, remember that you can do a system restore that takes the computer back to day one.

If you have Norton "Ghost" or another backup software, you can restore back to one of the backup dates.

And you get all the trialware again!

Thanks for the heads up.
'And just one more thing: Mac users, no smug smiles, please.'

Awww, come on. Just a quickie... :)
Hopefully it isn't the powers that be deciding we know too much about them and have to be shut down. If not, this is terrorism.

They have to stop giving these people jobs. This virus could cost over 100 billion if it's as bad as they say.

I don't care if it is some kid out of college. This is very scary. Not funny, or cute.
I blogged about it mentioning this. I plan on setting my computer to the 2nd before midnight on the 31st, then setting it back later. If April 1st never occurs, it may stop it from running.
60 Minutes ran a piece on this on Sunday. Apparently, a lot of this is being done for money (reputedly as much as $30,000 a month) by teenagers as young as 14 in Russia where it's looked on as "noble" to use hacking to rip-off rich, stupid Americans. Only problem is, there only half-right about that for most of the people whose computers -- and lives they screw up.
I take that back. It could be set on bootup if the computer date is April 1 or greater. What I will do is set it back a few days or week and wait to see if they can fix it. I am almost positive it cant run until the computer clock reaches April 1. Of course the mail you send people could get unread because its sorted so far down in their mail system.
It was thoughtful of you to post this.

No schadenfreude, smiling, smug or otherwise, but I run a free user group which exists in part for people wishing to part company with Windows.
Yeah, I'd like to know what's going on in their heads.

And as soon as I figured it out, I'd like to show them what the inside of their heads look like. I'd like to do what Al Capone did in the the Untouchables with a baseball bat.

http://www.youtube.com/watch?v=Zc9zF8G2Pvc
Great public service. Thank you!
As someone said above, we Mac users do worry our day is coming - the increasing popularity of Macs is worrisome in that regard. Do we feel smug? No, I think it's more that we feel relieved at not being targeted, and also that stuff like this makes up for the extreme disdain we all got for a very long time from a lot of PC users. (really. you have no idea.)
Smug smile. We only use Macs. Rated.
YIKES! I had not heard one little thing about this, Hawley. Thank you for the warning. Tonight I immunize. Hell. Maybe I just turn the machine off on Tuesday night, to be on the safe side...
I have been reading about this for days.... and 60 minutes did a big piece on it last night.

Now, we wait.
"Wouldn't it be interesting to interview the creators of Conficker and find out what it's like inside their heads?"

They are lesser criminals than the über-thugs at Microsoft who, for their own enrichment, bribed, lied, and threatened the industry into the dangerous 97% monoculture.

Mac users have every right to be smug: They have the courage to say NO to Microsoft's protection racket. The option is open to everyone. It's time you took it. (Not just Mac OS; every other free operating system is robust against today's malware.)

Talk to me about OS X or Linux or OpenSolaris vulnerabilities when they actually acquire some. Microsoft's market share, by the time that happens, should be small enough to drown in a bathtub.
Oh thank you Hawley for this article. I got some work to do.
Thanks, Hawley. I'm going to use my spyware on Tuesday night but I'm scared of this.
smiling smugly, just for you! rated timely
Curious. It is also the form a cyber warfare attack would assume. It should be interesting, in either event.
Thanks for heads up. Just sent your post to our IT guys.
Thank you. This is the first I've heard of this. I may be screaming tomorrow, but at least I will know why.
Whoo-hoo! No smug smile though darling.

Thank goodness I never put my virtual XP online.
Thanks for the interesting responses.

Further research suggests that in addition to Microsoft security updates and malware removal tools, plus spyware, a firewall is a good idea. Today I downloaded the free ZoneAlarm firewall, because I just realized my external firewall device had disappeared during my move to Monterey.

As I, a nonexpert, understand it, if we run a spyware/malware removal program and it finds nothing, then Conficker isn't on our computer, and with the suggested safeguards, our own PCs should be okay.

It will be interesting to see if there is a worldwide computer crisis in the next few days or if Conficker turns out to be a nonevent like Y2K, which approached with dire predictions and arrived without computer problems.
Thank you for posting this, Hawley. I've downloaded all recent security patches and have done what I can to protect my laptop. And to think I saw this blog by chance! My McAfee/Avert security is up to date. So now I wait and hope...
So far there is little news about Conficker actions, but it's not as much of a nonevent as Y2K turned out to be for computers. Yesterday I turned on the car radio in the middle of an NPR interview between an American woman and a techie about the attack on her home PC. She said most of the raids were coming from China but a few from the USA. He said the ones coming from China may not originate there, because people who produce worms and viruses sometimes route through China because the security is so low there (or something like that). Fingers crossed nothing more happens.
For the latest on the Conficker work waking up and how to test your computer see:

Conficker Wakes Up Internet Worm Carrying Damaging Software Is Updating, Researchers Say
April 9, 2009

http://www.cbsnews.com/stories/2009/04/09/tech/cnettechnews/main4931360.shtml?source=mostpop_story
Hum. My old Dell just went down. You're saying that it might be....no...not the ConfickerC!!! (I'll let you know.)