ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

Mosco · 2 April 2009, 04:47 AM

Below is a copy of an email from my mom who works for a large software company, please rest assured that ZERO of this is a joke:

BEGIN EMAIL:

National Cyber Alert System

Technical Cyber Security Alert TA09-088A

Conficker Worm Targets Microsoft Windows Systems

Original release date: March 29, 2009
Last revised: March 30, 2009
Source: US-CERT

Systems Affected

* Microsoft Windows

Overview

US-CERT is aware of public reports indicating a widespread
infection of the Conficker/Downadup worm, which can infect a
Microsoft Windows system from a thumb drive, a network share, or
directly across a corporate network, if the network servers are not
patched with the MS08-067 patch from Microsoft.

I. Description

Home users can apply a simple test for the presence of a
Conficker/Downadup infection on their home computers. The presence
of a Conficker/Downadup infection may be detected if a user is
unable to surf to their security solution website or if they are
unable to connect to the websites, by downloading detection/removal
tools available free from those sites:

* http://www.symantec.com/norton/theme...conficker_worm
* http://www.microsoft.com/protect/com...conficker.mspx
* http://www.mcafee.com

If a user is unable to reach any of these websites, it may indicate
a Conficker/Downadup infection. The most recent variant of
Conficker/Downadup interferes with queries for these sites,
preventing a user from visiting them. If a Conficker/Downadup
infection is suspected, the system or computer should be removed
from the network or unplugged from the Internet - in the case for
home users.

II. Impact

A remote, unauthenticated attacker could execute arbitrary code on
a vulnerable system.

III. Solution

Instructions, support and more information on how to manually
remove a Conficker/Downadup infection from a system have been
published by major security vendors. Please see below for a few of
those sites. Each of these vendors offers free tools that can
verify the presence of a Conficker/Downadup infection and remove
the worm:

Symantec:
http://www.symantec.com/business/sec...011316-0247-99

Microsoft:
http://support.microsoft.com/kb/962007
http://www.microsoft.com/protect/com...conficker.mspx

Microsoft PC Safety hotline at 1-866-PCSAFETY, for assistance.

US-CERT encourages users to prevent a Conficker/Downadup infection by
ensuring all systems have the MS08-067 patch (see
http://www.microsoft.com/technet/sec.../MS08-067.mspx),
disabling AutoRun functionality (see
http://www.us-cert.gov/cas/techalerts/TA09-020A.html), and
maintaining up-to-date anti-virus software.

IV. References

* Microsoft Windows Does Not Disable AutoRun Properly -
http://www.us-cert.gov/cas/techalerts/TA09-020A.html

* Virus alert about the Win32/Conficker.B worm -
http://support.microsoft.com/kb/962007

* Microsoft Security Bulletin MS08-067 - Critical -
http://www.microsoft.com/technet/sec.../MS08-067.mspx

* MS08-067: Vulnerability in Server service could allow remote code
execution -
http://support.microsoft.com/kb/958644

* The Conficker Worm -
http://www.symantec.com/norton/theme...conficker_worm

* W32/Conficker.worm -
http://us.mcafee.com/root/campaign.asp?cid=54857

* W32.Downadup Removal Tool -
http://www.symantec.com/business/sec...011316-0247-99

END EMAIL

B Square · 2 April 2009, 04:52 AM

Have been following this for the past week and have updated all protection. Hopefully I am wormless

Thanks for the info.

Marrk · 2 April 2009, 04:56 AM

So, it's almost noon in California. Has anything come of this yet?

seantk · 2 April 2009, 04:57 AM

Thanks for the info and links. I have been following this and hopefully nothing will come to pass

Sean

Brunotheboxer · 2 April 2009, 04:59 AM

How you like these apples?

bodybump · 2 April 2009, 05:30 AM

Quote:

Originally Posted by Brunotheboxer

How you like these apples?

bruno you always come up in the most unexpected moment hahahahahahah

diablojota · 2 April 2009, 05:33 AM

I like going without protection and patches. Oh yeah, I use an Apple!

Brunotheboxer · 2 April 2009, 05:43 AM

Quote:

Originally Posted by bodybump

bruno you always come up in the most unexpected moment hahahahahahah

DanP · 2 April 2009, 07:08 AM

an apple a day keeps the virus away..... omg that was lameo sorry

AIKO · 2 April 2009, 07:21 AM

Quote:

Originally Posted by diablojota

I like going without protection and patches. Oh yeah, I use an Apple!

Like barebacking. +1 on Apple

Scream · 2 April 2009, 08:10 AM

No worries here since I'm the "Mac" Daddy!

kyle L · 2 April 2009, 08:12 AM

Nothing hit me today! Their probably going to hit us tomorrow when we least expect it. :(

Oscar · 2 April 2009, 08:16 AM

This reminds me of Chicken Little running around yelling, 'The sky is falling'.

It is now April 2 here down under and nothing has emerged or been reported on by the Media.

It's all BS................

MrRetep · 2 April 2009, 08:57 AM

Im actually running a "Test" computer with no protection at the moment, Just wanna see what this thing really does. So I say bring it on!

The rest of my systems are safe and sound

redshirt1957 · 2 April 2009, 09:00 AM

We have gone from Y2K to K-Y2U.

Mosco · 2 April 2009, 09:57 AM

Quote:

Originally Posted by Oscar

This reminds me of Chicken Little running around yelling, 'The sky is falling'.

It is now April 2 here down under and nothing has emerged or been reported on by the Media.

It's all BS................

Better safe than sorry. I apologize if I remind you of a cartoon chicken, but if one person DID get infected and I kept this (legitimately sourced) information to myself - then I would also be wrong. I am delighted to hear that you were unaffected, kudos. However, I do not appreciate being likened to a boy who cried wolf. This was on the news for the last few days and one would have reasons to believe this could have been a legitimate threat. I would rather it be a false alarm that I am ready for, then a real thing that catches me unprepared. But that's just me.

redshirt1957 · 2 April 2009, 10:27 AM

Quote:

Originally Posted by Mosco

Better safe than sorry. I apologize if I remind you of a cartoon chicken, but if one person DID get infected and I kept this (legitimately sourced) information to myself - then I would also be wrong. I am delighted to hear that you were unaffected, kudos. However, I do not appreciate being likened to a boy who cried wolf. This was on the news for the last few days and one would have reasons to believe this could have been a legitimate threat. I would rather it be a false alarm that I am ready for, then a real thing that catches me unprepared. But that's just me.

What next. "I would tell you more, but then I would have to have Bruno kill you". You guys are cracking me up.

Mosco · 2 April 2009, 12:55 PM

Quote:

Originally Posted by redshirt1957

What next. "I would tell you more, but then I would have to have Bruno kill you". You guys are cracking me up.

Here we go....

MrRetep · 2 April 2009, 01:00 PM

Quote:

Originally Posted by redshirt1957

What next. "I would tell you more, but then I would have to have Bruno kill you". You guys are cracking me up.

Quote:

Originally Posted by Mosco

Here we go....

Got the popcorn! Now i'll just sit back and enjoy the show

Anyone want some?

Mosco · 2 April 2009, 01:05 PM

Quote:

Originally Posted by MrRetep

Got the popcorn! Now i'll just sit back and enjoy the show

Anyone want some?

Nope. I am taking the high road here - I don't feel the need to defend my actions. I meant well, my intentions were to protect members of TRF and if that is not how it is taken -

MrRetep · 2 April 2009, 01:08 PM

Quote:

Originally Posted by Mosco

Nope. I am taking the high road here - I don't feel the need to defend my actions. I meant well, my intentions were to protect members of TRF and if that is not how it is taken -

Popcorn for the trip to the NBA thread?

Mosco · 2 April 2009, 01:12 PM

Quote:

Originally Posted by MrRetep

Popcorn for the trip to the NBA thread?

I'm for that!

junglemaster · 2 April 2009, 01:35 PM

nothing happened to me... i think it was a prank on us

Mosco · 2 April 2009, 01:57 PM

Quote:

Originally Posted by junglemaster

nothing happened to me... i think it was a prank on us

http://www.consumeraffairs.com/news0...orm_turns.html

Ashley · 2 April 2009, 03:20 PM

Greg, thank you for posting the info. There have been many conflicting reports about the validity of the claims, but either way, it's better safe than sorry, right? I appreciate it!

Mosco · 2 April 2009, 09:59 PM

Quote:

Originally Posted by Ashley

Greg, thank you for posting the info. There have been many conflicting reports about the validity of the claims, but either way, it's better safe than sorry, right? I appreciate it!

Exactly, Ashley! Thank You for understanding - and bringing never-ending sweetness to TRF!

Fact of the matter is - this worm originally hit in January. It is a fact that it embedded itself in many, many machines, just look at this:
http://www.pcworld.com/article/15787...cker_worm.html

Worm works in such a manner that it can sit silently on a machine until it receives 'instructions' and then all hell can break loose. The original report was that it will receive new instructions on April 1st - whether true or not, as you said, better safe than sorry.

Carolina · 2 April 2009, 10:21 PM

I believe it's always better to be prepared. It's easy to be a Monday morning quarterback, too!

Ashley · 2 April 2009, 11:50 PM

Quote:

Originally Posted by Mosco

Exactly, Ashley! Thank You for understanding - and bringing never-ending sweetness to TRF!

Fact of the matter is - this worm originally hit in January. It is a fact that it embedded itself in many, many machines, just look at this:
http://www.pcworld.com/article/15787...cker_worm.html

Worm works in such a manner that it can sit silently on a machine until it receives 'instructions' and then all hell can break loose. The original report was that it will receive new instructions on April 1st - whether true or not, as you said, better safe than sorry.

Ugh, this is definitely worrying! Though I checked out those sites and they all worked for me, so hopefully I'm worm free!

Rockrolex · 2 April 2009, 11:56 PM

There are reports that the worm tried to phone home, but no one answered.

The theory is that the hackers are lying low at the moment because so many security sites are watching that they are afraid they will get caught. They know they are dead meat if that happens. So they will either give up or try to wait till there's less chatter about it.

In any case, better to be safe than sorry.

Mosco · 3 April 2009, 12:11 AM

Quote:

Originally Posted by Rockrolex

There are reports that the worm tried to phone home, but no one answered.

The theory is that the hackers are lying low at the moment because so many security sites are watching that they are afraid they will get caught. They know they are dead meat if that happens. So they will either give up or try to wait till there's less chatter about it.

In any case, better to be safe than sorry.

That's what I thought - but some have disagreed....

2 April 2009, 04:47 AM	#1
Mosco "TRF" Member Join Date: Dec 2008 Real Name: Greg Location: Cincinnati Watch: I like to... Posts: 18,567	THIS IS NOT A JOKE - Widespread computer worm to hit on April 1st Below is a copy of an email from my mom who works for a large software company, please rest assured that ZERO of this is a joke: BEGIN EMAIL: National Cyber Alert System Technical Cyber Security Alert TA09-088A Conficker Worm Targets Microsoft Windows Systems Original release date: March 29, 2009 Last revised: March 30, 2009 Source: US-CERT Systems Affected * Microsoft Windows Overview US-CERT is aware of public reports indicating a widespread infection of the Conficker/Downadup worm, which can infect a Microsoft Windows system from a thumb drive, a network share, or directly across a corporate network, if the network servers are not patched with the MS08-067 patch from Microsoft. I. Description Home users can apply a simple test for the presence of a Conficker/Downadup infection on their home computers. The presence of a Conficker/Downadup infection may be detected if a user is unable to surf to their security solution website or if they are unable to connect to the websites, by downloading detection/removal tools available free from those sites: * http://www.symantec.com/norton/theme...conficker_worm * http://www.microsoft.com/protect/com...conficker.mspx * http://www.mcafee.com If a user is unable to reach any of these websites, it may indicate a Conficker/Downadup infection. The most recent variant of Conficker/Downadup interferes with queries for these sites, preventing a user from visiting them. If a Conficker/Downadup infection is suspected, the system or computer should be removed from the network or unplugged from the Internet - in the case for home users. II. Impact A remote, unauthenticated attacker could execute arbitrary code on a vulnerable system. III. Solution Instructions, support and more information on how to manually remove a Conficker/Downadup infection from a system have been published by major security vendors. Please see below for a few of those sites. Each of these vendors offers free tools that can verify the presence of a Conficker/Downadup infection and remove the worm: Symantec: http://www.symantec.com/business/sec...011316-0247-99 Microsoft: http://support.microsoft.com/kb/962007 http://www.microsoft.com/protect/com...conficker.mspx Microsoft PC Safety hotline at 1-866-PCSAFETY, for assistance. US-CERT encourages users to prevent a Conficker/Downadup infection by ensuring all systems have the MS08-067 patch (see http://www.microsoft.com/technet/sec.../MS08-067.mspx), disabling AutoRun functionality (see http://www.us-cert.gov/cas/techalerts/TA09-020A.html), and maintaining up-to-date anti-virus software. IV. References * Microsoft Windows Does Not Disable AutoRun Properly - http://www.us-cert.gov/cas/techalerts/TA09-020A.html * Virus alert about the Win32/Conficker.B worm - http://support.microsoft.com/kb/962007 * Microsoft Security Bulletin MS08-067 - Critical - http://www.microsoft.com/technet/sec.../MS08-067.mspx * MS08-067: Vulnerability in Server service could allow remote code execution - http://support.microsoft.com/kb/958644 * The Conficker Worm - http://www.symantec.com/norton/theme...conficker_worm * W32/Conficker.worm - http://us.mcafee.com/root/campaign.asp?cid=54857 * W32.Downadup Removal Tool - http://www.symantec.com/business/sec...011316-0247-99 END EMAIL __________________ Instagram - @CaliberSwiss *“A man who procrastinates in his choosing will inevitably have his choice made for him by circumstance.” - Hunter S. Thompson*

2 April 2009, 04:52 AM	#2
B Square "TRF" Member Join Date: Sep 2008 Real Name: Boyd Location: NC Posts: 1,815	Have been following this for the past week and have updated all protection. Hopefully I am wormless Thanks for the info. __________________ 16610M 16710Z Pepsi 16570V White

2 April 2009, 04:57 AM	#4
seantk "TRF" Member Join Date: Dec 2007 Real Name: Sean Location: West Florida Posts: 2,671	Thanks for the info and links. I have been following this and hopefully nothing will come to pass Sean __________________ "Life is frittered away with detail... simplify, simplify!" Henry D. Thoreau

2 April 2009, 08:10 AM	#11
Scream "TRF" Member Join Date: Mar 2009 Real Name: Jeff Location: CNY Watch: Daytona 116520 Posts: 927	No worries here since I'm the "Mac" Daddy! __________________ .ROLEXROLEX

2 April 2009, 08:16 AM	#13
Oscar "TRF" Member Join Date: Nov 2007 Real Name: Michael Location: Melb, Australia Watch: SS GMTIIC Posts: 1,350	This reminds me of Chicken Little running around yelling, 'The sky is falling'. It is now April 2 here down under and nothing has emerged or been reported on by the Media. It's all BS................ __________________ Cheers, Michael The miracle is not to walk on water. The miracle is to walk on earth. Every day we are engaged in a miracle which we don't even recognise: a blue sky, white clouds, green leaves, the black curious eyes of a child, our own two eyes All is a miracle. - Thich Nhat Hanh.

2 April 2009, 04:56 AM	#3
Marrk "TRF" Member Join Date: Mar 2008 Real Name: Mark Location: Los Angeles Watch: 5513 Posts: 2,192	So, it's almost noon in California. Has anything come of this yet?

2 April 2009, 04:59 AM	#5
Brunotheboxer Banned Join Date: Mar 2008 Real Name: Bruno Location: Boston/Cape Cod Watch: 16610,PAM. 111, G Posts: 7,608	How you like these apples?

2 April 2009, 05:33 AM	#7
diablojota "TRF" Member Join Date: Mar 2006 Real Name: Frank Location: Chattanooga, TN Watch: SS Submariner Date Posts: 4,042	I like going without protection and patches. Oh yeah, I use an Apple!

2 April 2009, 07:08 AM	#9
DanP Banned Join Date: Apr 2008 Real Name: Dan P Location: Vancouver. Canada Watch: GV-U-Kno-Me :) Posts: 2,436	an apple a day keeps the virus away..... omg that was lameo sorry

2 April 2009, 08:12 AM	#12
kyle L "TRF" Member Join Date: Feb 2009 Location: USA Watch: Rolex Explorer I Posts: 10,278	Nothing hit me today! Their probably going to hit us tomorrow when we least expect it. :(

2 April 2009, 08:57 AM	#14
MrRetep "TRF" Member Join Date: Sep 2008 Real Name: Pete Location: Orange County, CA Watch: the Lakers Posts: 686	Im actually running a "Test" computer with no protection at the moment, Just wanna see what this thing really does. So I say bring it on! The rest of my systems are safe and sound

2 April 2009, 09:00 AM	#15
redshirt1957 "TRF" Member Join Date: Sep 2007 Real Name: Bubba Location: Bitsyville! Watch: Blue YM today! Posts: 10,053	We have gone from Y2K to K-Y2U.

2 April 2009, 01:35 PM	#23
junglemaster Member Join Date: Mar 2009 Location: MS Posts: 21	nothing happened to me... i think it was a prank on us

2 April 2009, 03:20 PM	#25
Ashley "TRF" Member Join Date: Jan 2007 Real Name: Ashley Location: Calgary Posts: 6,967	Greg, thank you for posting the info. There have been many conflicting reports about the validity of the claims, but either way, it's better safe than sorry, right? I appreciate it!

2 April 2009, 10:21 PM	#27
Carolina "TRF" Member Join Date: Jul 2007 Location: North Carolina Watch: it, Bubba! Posts: 6,271	I believe it's always better to be prepared. It's easy to be a Monday morning quarterback, too! __________________ . .Member #5380 .

2 April 2009, 11:56 PM	#29
Rockrolex TRF Moderator & 2024 SubLV41 Patron Join Date: May 2005 Real Name: God Location: Washington, D.C. Watch: What do you think? Posts: 37,970	There are reports that the worm tried to phone home, but no one answered. The theory is that the hackers are lying low at the moment because so many security sites are watching that they are afraid they will get caught. They know they are dead meat if that happens. So they will either give up or try to wait till there's less chatter about it. In any case, better to be safe than sorry. __________________ Despite the high cost of living, it's still very popular. *Tosser Cabinet Member* Official Member: 'Perpetual 30' Vegas International GTG 2016 Official Member "WIS-CON" Las Vegas International GTG 2017 Official Member "WIS-CON" Las Vegas International GTG 2018 Official Member "WIS-CON" Las Vegas International GTG 2019

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode