Conflicker Worm Activates ... Somewhat

April fools day came and went with no real activity, but now it looks like things are beginning to roll. The p2p capability of the worm was activated and some new capabilities have apparently been downloaded by at least some clients. One thing has become clear: the motivation behind the worm appears to be money.

Interestingly enough, apparently a fake antivirus application could be downloaded and installed to infected machines. More information can be found at the trendmicro blog (look toward the bottom of the post). From the screenshot, the fake app looks pretty realistic...and offers to clean up your PC for the modest price of $49.95.

To test if you have the worm and for removal instructions, see my post from April 3.