Virus
Security experts are playing down the 'uninformed hysteria' surrounding Conficker

Cool down on Conficker panic, say experts

1 April update not likely to be doomsday for malware infection

Shaun Nichols in San Francisco

Security experts are downplaying much of the speculation surrounding an expected 1 April update for the notorious Conficker malware.

Also known as 'downadup', the malware has been spreading throughout 2009 and is believed to have infected millions of PCs.

Advertisement

Analysis of the Conficker code suggests that the latest version will instruct infected machines on 1 April to contact an unknown domain and await further instructions. The possibility has led to reports of a possible "doomsday" infection, or a huge attack from the Conficker botnet.

These worries, however, are little more than uninformed hysteria, according to security experts. Many security researchers believe that Conficker's April Fool's Day event may in fact be laughably minor.

F-Secure researchers reassured users in a special guide posted to the company blog that in all likelihood Conficker's 1 April update would be a non-event.

"The Conficker worm is going to change its operation a bit, but that's unlikely to cause anything visible on 1 April," F-Secure said.

The company also noted that only the latest version of the malware, known as 'Conficker C', which constitutes a small percentage of total infections, would be carrying out any instructions on 1 April.

Researchers from other security firms agree. "Some people have got rather confused as to what the 1 April deadline really means," wrote Sophos senior technology consultant Graham Cluley in a blog post.

"The truth is that Conficker is not set to activate a specific payload on 1 April. Rather, Conficker will begin to attempt to contact the 50,000-a-day potential call-home web servers from which it may receive updates."

Memories of past malware infections are further stoking worries about Conficker. This week marks the 10th anniversary of the Melissa virus, which created headlines by crashing email servers across the globe.

Malware creation has evolved into a lucrative business since Melissa, and most experts believe that Conficker's update will be the first step in a spam run or other money-making activity, rather than an old-fashioned attempt at internet mayhem.

"The people behind this piece of code are very skilled, very well informed and resourced. They have invested much time and effort in the creation of this botnet, and will be aiming to see some return on that investment," wrote Trend Micro senior security advisor Rik Ferguson in a blog post.

"Making so much noise that every victim knows they're infected will have entirely the opposite effect."

Users are advised to protect against becoming part of the Conficker botnet by installing the latest security patches from Microsoft, and keeping all security and anti-virus tools installed and up to date.

Sophos is offering a free Conficker removal tool to users who believe that their Windows PCs may already be infected. Other operating systems are not believed to be vulnerable.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

IT white papers

Search white papers

Top categories

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file...

Dell Adamo XPS

Dell launches ultra-thin Adamo XPS

World's thinnest laptop will be available by Christmas

Top 10 articles, 6 November 2009

The worst Microsoft products of all time, and a USB...

Iain Thomson

Pirate Bay shutdown could be inspiring online militancy

Recent Swedish attacks raise worrying possibility

Primary Navigation