None.
Confiker Virus
My theory: They "leaked" that april 1st is when it will receive instructions to that after all the hype has died down they can send the instructions and fool more people.
SDE, BWAPI owner, hacker.
It seems like a decent virus. Still no match for me or my [tweaked] system.
This is what any virus should be doing, although I would probably enum all processes and attach to most/all of them.
Almost genius.
I don't know why the author removed the NetBIOS and removable media attacks in variant D, IMO they were important in the lifespan of the virus.
Its self-defense is a bit funny.
I do all of this manually. 
Big mistake. Predefined lists are a last resort.
Post has been edited 1 time(s), last time on Apr 5 2009, 12:00 pm by Heinermann.
Quote
Variants B and later may attach instead to a running services.exe or Windows Explorer process.
Quote
To start itself at system boot, the worm saves a copy of its DLL form to a random filename in the Windows system folder, then adds keys to the registry to have svchost.exe invoke that DLL as an invisible network service.
I don't know why the author removed the NetBIOS and removable media attacks in variant D, IMO they were important in the lifespan of the virus.
Its self-defense is a bit funny.
Quote
Variant C of the worm resets System Restore points and disables a number of system services such as Windows Automatic Update, Windows Security Center, Windows Defender and Windows Error Reporting.
Quote
Processes matching a predefined list of antiviral, diagnostic or system patching tools are watched for and terminated.
Post has been edited 1 time(s), last time on Apr 5 2009, 12:00 pm by Heinermann.
Quote from Fierce
So does anyone actually have this? Every computer I have encountered does not.
I would also like to see some source as to the hospital and gov. attacks.
but i can't find the article that mentioned the hospital thing. Basically what had happened was... Since confiker really affects outdated computers and those 5 hospitals didn't update since every time they would install a new update they had to restart the systems or w/e. Being a hospital i'd imagine 'keeping the systems' on is a really big deal.Sounds legit.
None.
SDE, BWAPI owner, hacker.
Options
[2024-5-22. : 6:10 am]
Riney -- I come back after 4 months. Post wob. Make a crappy post in Null. Hit a 0 in magic boxes.[2024-5-20. : 4:03 am]
O)FaRTy1billion[MM] -- below the minimap should be a thing that says "Overlay Settings" with a little + button in the corner, press the + to expand it, uncheck Use Defaults, then change "Tile Overlay" to "Height"
Members Online: Roy
Roy