Expert: Brian Benosky - 3/26/2009

Question
Hi Brian, do you think the Conflictor C virus will be a problem on April 1, or are the AV companies over-hyping this threat to sell more security products? And if there is a major threat, what can a PC user do, if anything, to prevent this? Thanks!

Answer
Hi Mike

Conficker (AKA Downadup) variants have been becoming progressively malicious, and this latest C variant has many folks worried.  The code will attempt to generate 50,000 URLs a day and try to access, download, or report back to, 500 of them.  The main purpose of this seems to be to provide the authors with a secure binary updating service that will grant them instant control of millions of PCs worldwide.  All of the big security companies are trying to get the word out so businesses (the main target) and users can check their infrastructure.  Another worrisome item: With Conficker C, the authors have answered back with  their own countermeasures to thwart defenses that have previously worked with the other variants.  New tools needed to be developed, and quickly, to detect and remove the threat.  Make sure all that you install all Critical Windows Updates and have your antivirus program updated to the latest definitions prior to April 1st.  USB drives used in a corporate environment are particularly susceptible, so use them with caution.  You can read more about this threat from here:
http://www.calendarofupdates.com/updates/index.php?showtopic=17672&hl

Brian