Conficker finally on the move

[EV_Ares]

Last night, Conficker -- the computer worm that's had every computer user in a tizzy for weeks -- finally began to show signs of life. What exactly it's doing, no one's quite sure.

Here's the scoop: On April 8, Conficker began updating itself via Internet download, a process which became possible on the April 1 launch date. Before April 8, Conficker had been searching for updates but hadn't found any such instructions. Now they are finally being delivered.

What's in those instructions, though, remains a bit of a mystery: The downloaded programs are heavily encrypted, so they can't be analyzed in detail. We do know that, after installation, the instructions we can see are relatively benign: They tell the computer to check one of five random websites -- MySpace, eBay, AOL, CNN, and MSN -- in order to verify the computer has internet access. It then confirms the date and time.

After this, the downloaded software seemingly deletes itself, along with every trace that it had ever been installed (right down to the registry keys).

rest of the article @ link: http://tech.yahoo.com/blogs/null/137609

[redqueen]

1. This thread in LBN contains links to some online tests:

http://www.democraticunderground.com/discuss/duboard.php?az=view_all&address=102x3823596

[flobee1]

2. Microsoft needs to hire these guys

A software update that worked and even deleted registry keys after it finished-and it seems to have worked on multiple systems!
why can't windows work that smoothly?

[canetoad]

3. I keep getting the feeling

that Conficker is just a test run for something else.

[pnwmom]

4. It's also using computers to send spam to addresses in people's mail systems.

No one should be clinking on suspicious links, even in emails that appear to be from friends.