April fools day came and went with no real activity, but now it looks like things are beginning to roll. The p2p capability of the worm was activated and some new capabilities have apparently been downloaded by at least some clients. One thing has become clear: the motivation behind the worm appears to be money.

Interestingly enough, apparently a fake antivirus application could be downloaded and installed to infected machines. More information can be found at the trendmicro blog (look toward the bottom of the post). From the screenshot, the fake app looks pretty realistic...and offers to clean up your PC for the modest price of $49.95.

To test if you have the worm and for removal instructions, see my post from April 3.

Continue reading...

To see if you have the Conflicker worm, follow this link to the eye chart by the conflicker working group: http://www.confickerworkinggroup.org/infection_test/cfeyechart.html.

You'll know immediately if you are infected. If you DO have the worm, shame on you for not letting Windows update itself properly. Nothing of note has happened thus far, but who knows what will be going on in the future if you do not remove it. Instructions for removal are at the bottom of this page.

Continue reading...