DownAdUp - Conficker Detection Software

Message boards : Number crunching : DownAdUp - Conficker Detection Software
Message board moderation

To post messages, you must log in.

Previous · 1 · 2 · 3 · Next

AuthorMessage
Profile Jord
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 15184
Credit: 4,362,181
RAC: 3
Netherlands
Message 881236 - Posted: 1 Apr 2009, 8:54:07 UTC
Last modified: 1 Apr 2009, 9:27:59 UTC

At least I like CNN's picture to show you what the problem may look like:



Mind, if you see that on your keyboard, you may have been dead for some time now. Pinch yourself. Also possible that your lunch escaped. ;-)
ID: 881236 · Report as offensive
Profile champ
Volunteer tester
Avatar

Send message
Joined: 12 Mar 03
Posts: 3642
Credit: 1,489,147
RAC: 0
Germany
Message 881248 - Posted: 1 Apr 2009, 10:16:14 UTC - in response to Message 881236.  
Last modified: 1 Apr 2009, 10:16:35 UTC

Dont want to be off topic now, but have you ever tasted this worm? I have done it a couple of week ago because i feed my birds with them. So i was curious how they taste. They dont taste very bad. LOL

This kind of worm, isn´t very bad.
ID: 881248 · Report as offensive
Profile Sutaru Tsureku
Volunteer tester

Send message
Joined: 6 Apr 07
Posts: 7105
Credit: 147,663,825
RAC: 5
Germany
Message 881251 - Posted: 1 Apr 2009, 10:37:05 UTC
Last modified: 1 Apr 2009, 10:38:43 UTC


AFAIK, in Germany this worm is named little bit different..
I guess if I would write the name here this post would be hidden.. :-D

Have a look here:
magazine.web.de


@ champ

Yes, some germans are crazy.. ;-D


In some countries they eat things normally (animals, insect) we would never touch! ;-)

ID: 881251 · Report as offensive
Profile zoom3+1=4
Volunteer tester
Avatar

Send message
Joined: 30 Nov 03
Posts: 65747
Credit: 55,293,173
RAC: 49
United States
Message 881273 - Posted: 1 Apr 2009, 13:31:37 UTC

The worms name is conficker, Not conflicker, Will the OP please edit the title?

Thanks.
The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 881273 · Report as offensive
Profile skildude
Avatar

Send message
Joined: 4 Oct 00
Posts: 9541
Credit: 50,759,529
RAC: 60
Yemen
Message 881277 - Posted: 1 Apr 2009, 14:05:29 UTC

and apparently the Virus was a dud.


In a rich man's house there is no place to spit but his face.
Diogenes Of Sinope
ID: 881277 · Report as offensive
Profile ccappel
Avatar

Send message
Joined: 27 Jan 00
Posts: 362
Credit: 1,516,412
RAC: 0
United States
Message 881307 - Posted: 1 Apr 2009, 15:59:05 UTC - in response to Message 881277.  

and apparently the Virus was a dud.

April Fools!
"Life is a tragedy for those who feel, and a comedy for those who think."

"I never get into an argument that I cannot win."
ID: 881307 · Report as offensive
Profile -=SuperG=-
Avatar

Send message
Joined: 3 Apr 99
Posts: 63
Credit: 89,161,651
RAC: 23
Canada
Message 881315 - Posted: 1 Apr 2009, 16:32:13 UTC

OK.. It could be a DUD. Did it say somewhere that it was supposed to deploy at midnight? Or could it hit anytime today. I will be watching all day.

I have been playing this virus down for the last week. Until this day has passed without serious incident I will not be celebrating..:P Thats not to say that it isn't actually just starting the countdown today either.. hmmm

Sorry to be a pessimist.. :(

So far none of my machines or client's machines have been hit either.. :)
Boinc Wiki




"Great spirits have always encountered violent opposition from mediocre minds." -Albert Einstein
ID: 881315 · Report as offensive
Profile Sutaru Tsureku
Volunteer tester

Send message
Joined: 6 Apr 07
Posts: 7105
Credit: 147,663,825
RAC: 5
Germany
Message 881317 - Posted: 1 Apr 2009, 16:36:44 UTC
Last modified: 1 Apr 2009, 16:38:56 UTC


@ SuperJoker

Is this name well for english forums?
In Germany 'fi**er' mean something different! ;-D


@ -=SuperG=-

AFAIK, they didn't said at which time he will be active.

ID: 881317 · Report as offensive
Profile jason_gee
Volunteer developer
Volunteer tester
Avatar

Send message
Joined: 24 Nov 06
Posts: 7489
Credit: 91,093,184
RAC: 0
Australia
Message 881321 - Posted: 1 Apr 2009, 16:48:58 UTC
Last modified: 1 Apr 2009, 17:11:15 UTC

Hi Sutaru,
In English this is fine, but I do feel as an international forum that the name should be obfuscated as required by the forum rules, out of respect for our German friends (especially youngsters).

@Everyone, I doubt this is an April fools day hoax, from evidence I have seen, but I sincerely suggest if this proves to be as such, that you send an invoice to Symantec and other sources for your precious time invested in dealing with the warning emails and scanning time. We should expect security professionals to be just that.

[Edit: To explain/clarify, the general recent rise in false detections is indicative of heuristics abuse for benchmark purposes, and has me changing two schools' AV vendor licences at great expense. They will never get our business again. Expect nothing but professionalism from those that protect your data.]
"Living by the wisdom of computer science doesn't sound so bad after all. And unlike most advice, it's backed up by proofs." -- Algorithms to live by: The computer science of human decisions.
ID: 881321 · Report as offensive
Profile Sutaru Tsureku
Volunteer tester

Send message
Joined: 6 Apr 07
Posts: 7105
Credit: 147,663,825
RAC: 5
Germany
Message 881335 - Posted: 1 Apr 2009, 17:10:31 UTC
Last modified: 1 Apr 2009, 17:11:56 UTC


@ jason_gee

Uhh.. I think not possible..

Somebody changed now the title of this thread to 'confi**er'..


BTW.
I'm not a young boy.. ;-D
Sadly.. I would like to be much younger..
..if I could have one wish.. *dreaming* :-D

ID: 881335 · Report as offensive
Cosmic_Ocean
Avatar

Send message
Joined: 23 Dec 00
Posts: 3027
Credit: 13,516,867
RAC: 13
United States
Message 881337 - Posted: 1 Apr 2009, 17:13:23 UTC

Yeah, nobody ever specifically mentioned "midnight", which is also another conundrum because going by UTC, there's only one midnight, but going with local timezones, there are... a lot more. All that I saw in all the research is that it would "activate on April 1". So the day is not done, there's still time! :D
Linux laptop:
record uptime: 1511d 20h 19m (ended due to the power brick giving-up)
ID: 881337 · Report as offensive
Profile jason_gee
Volunteer developer
Volunteer tester
Avatar

Send message
Joined: 24 Nov 06
Posts: 7489
Credit: 91,093,184
RAC: 0
Australia
Message 881339 - Posted: 1 Apr 2009, 17:14:46 UTC - in response to Message 881335.  

Not just yourself Sutaru ;) And I hope not a hoax, because that would make some people lose their jobs.

Don't mess with the data !
"Living by the wisdom of computer science doesn't sound so bad after all. And unlike most advice, it's backed up by proofs." -- Algorithms to live by: The computer science of human decisions.
ID: 881339 · Report as offensive
Profile ccappel
Avatar

Send message
Joined: 27 Jan 00
Posts: 362
Credit: 1,516,412
RAC: 0
United States
Message 881348 - Posted: 1 Apr 2009, 17:42:57 UTC - in response to Message 881307.  
Last modified: 1 Apr 2009, 17:43:33 UTC

and apparently the Virus was a dud.

April Fools!

In no way was I implying that an April Fools joke was being perpetrated by the security professionals themselves, but by the virus writer...put in enough code to imply an activation of April 1 and enough confusing code to obfuscate the virus' intended actions.

Or maybe the security professionals (and enough of us users) did their job and made this a non-event.

However, I do agree with the sentiment that the day is not over yet.
"Life is a tragedy for those who feel, and a comedy for those who think."

"I never get into an argument that I cannot win."
ID: 881348 · Report as offensive
Josef W. Segur
Volunteer developer
Volunteer tester

Send message
Joined: 30 Oct 99
Posts: 4504
Credit: 1,414,761
RAC: 0
United States
Message 881363 - Posted: 1 Apr 2009, 18:47:31 UTC - in response to Message 881348.  

and apparently the Virus was a dud.

April Fools!

In no way was I implying that an April Fools joke was being perpetrated by the security professionals themselves, but by the virus writer...put in enough code to imply an activation of April 1 and enough confusing code to obfuscate the virus' intended actions.

Or maybe the security professionals (and enough of us users) did their job and made this a non-event.

However, I do agree with the sentiment that the day is not over yet.

The payload of the virus is strongly encrypted, making disassembly impossible; that's why there is uncertainty about the extent of its effects.

I presume the researchers have set an infected computer's clock ahead to get some idea of what happens. It's curious that there isn't a more definite statement than "April 1".
                                                               Joe
ID: 881363 · Report as offensive
Profile -=SuperG=-
Avatar

Send message
Joined: 3 Apr 99
Posts: 63
Credit: 89,161,651
RAC: 23
Canada
Message 881370 - Posted: 1 Apr 2009, 19:04:19 UTC

@Jason_gee

Sorry you are having trouble with Symantec.

I personally use their products loyally and have had little or no issues with the 6 schools and dozen or so companies we have it deployed at. I would appreciate it if you would stop bashing by name and perhaps step back and look at the whole picture.

This is not a product bashing thread. I don't care what your experiences are with it.
Boinc Wiki




"Great spirits have always encountered violent opposition from mediocre minds." -Albert Einstein
ID: 881370 · Report as offensive
Profile ML1
Volunteer moderator
Volunteer tester

Send message
Joined: 25 Nov 01
Posts: 20289
Credit: 7,508,002
RAC: 20
United Kingdom
Message 881380 - Posted: 1 Apr 2009, 19:26:24 UTC
Last modified: 1 Apr 2009, 19:28:01 UTC

This Confickering fiasco should at least cause "pause for thought"...

So who has gained the greatest free publicity (and profits) from all of this I wonder?

Meanwhile, I wonder what the Marketing spin is from Microsoft for all the fun and fear surrounding their products.

Also note that Microsoft also sell anti-virus solutions for their very own products...


And meanwhile a how-many-millions strong Microsoft OS Botnet slumbers...


For myself, I'm just horrified by all the wasted time, effort and miles of media coverage over something that should not be a problem in the first place!

What a waste!!

Keep searchin',
Martin
See new freedom: Mageia Linux
Take a look for yourself: Linux Format
The Future is what We all make IT (GPLv3)
ID: 881380 · Report as offensive
Profile Misfit
Volunteer tester
Avatar

Send message
Joined: 21 Jun 01
Posts: 21804
Credit: 2,815,091
RAC: 0
United States
Message 881381 - Posted: 1 Apr 2009, 19:28:22 UTC - in response to Message 881370.  

I don't care what your experiences are with it.

Now there's a statement of intolerance. You want your pro-Symantec view to be heard but IYO Jason's anti-Symantec view should be suppressed. Jason backed up his comment with his experience of the product, as did you.

As for my experience... I stopped using it years ago because of all the false positives and what I viewed as bloatware. Even after uninstalling it was still all over my registry.
me@rescam.org
ID: 881381 · Report as offensive
Profile Paul D Harris
Volunteer tester

Send message
Joined: 1 Dec 99
Posts: 1122
Credit: 33,600,005
RAC: 0
United States
Message 881384 - Posted: 1 Apr 2009, 19:33:13 UTC
Last modified: 1 Apr 2009, 19:34:58 UTC

Keep using NORTON and you will be infected due to all the false positives I hear 2009 is better but I still don't use it and it is free from my ISP.
ID: 881384 · Report as offensive
Profile -=SuperG=-
Avatar

Send message
Joined: 3 Apr 99
Posts: 63
Credit: 89,161,651
RAC: 23
Canada
Message 881389 - Posted: 1 Apr 2009, 19:48:17 UTC - in response to Message 881381.  

I don't care what your experiences are with it.

Now there's a statement of intolerance. You want your pro-Symantec view to be heard but IYO Jason's anti-Symantec view should be suppressed. Jason backed up his comment with his experience of the product, as did you.

As for my experience... I stopped using it years ago because of all the false positives and what I viewed as bloatware. Even after uninstalling it was still all over my registry.


Your right, that was very intolerant. I just don't understand why people feel they need to bash a product when all that product is doing is trying to help. As far as Pro-Symantec - I was simply defending the software...

It's just our opinion anyways, I just don't think it needs to be done here.
Boinc Wiki




"Great spirits have always encountered violent opposition from mediocre minds." -Albert Einstein
ID: 881389 · Report as offensive
Cosmic_Ocean
Avatar

Send message
Joined: 23 Dec 00
Posts: 3027
Credit: 13,516,867
RAC: 13
United States
Message 881394 - Posted: 1 Apr 2009, 20:17:01 UTC

Every major AV solution has its "hay-day" where it is in the spotlight and does a really good job at doing what it was intended for. Over the past few years I have seen several cycles from several very good pieces of software.

Norton was the best a few years ago, and then McAfee has its chance to rise and did a great job, then there was a time where I didn't keep up for a while, then it was all about Nod32, then AVG was on top, and now my preference is Avira. My choice to move to Avira is that colleague of mine uses it at work and recommends it to clients, so I gave it a try and it found 14 things that were legitimately bad that AVG completely ignored/missed.

Regarding Symantec/Norton and their reliability.. My father's company laptop has Symantec Enterprise on it, and it was able to find three trojans, but could not do anything about them. AVG found 11 trojans and wiped them all out.

So I think what I'm saying is that everyone has a preference, but the bottom line is that no one company has the best product. For the best result (being infection-free), the use of multiple solutions simultaneously is the way to go. Only caveat with that is that a lot of times they don't play nicely with each other, but from what I have seen, it is mostly a conflict regarding the resident shield (as AVG calls it), or in general terms, real-time monitoring. If you disable all (or all but one) of the real-time monitoring, they will play nicely together just fine. You can scan whole disks or just certain files with any of the apps at any time.

[/rant]
Linux laptop:
record uptime: 1511d 20h 19m (ended due to the power brick giving-up)
ID: 881394 · Report as offensive
Previous · 1 · 2 · 3 · Next

Message boards : Number crunching : DownAdUp - Conficker Detection Software


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.