My theory: They "leaked" that april 1st is when it will receive instructions to that after all the hype has died down they can send the instructions and fool more people.

It seems like a decent virus. Still no match for me or my [tweaked] system.

This is what any virus should be doing, although I would probably enum all processes and attach to most/all of them.

Almost genius.

I don't know why the author removed the NetBIOS and removable media attacks in variant D, IMO they were important in the lifespan of the virus.
Its self-defense is a bit funny.
I do all of this manually.

Big mistake. Predefined lists are a last resort.

Post has been edited 1 time(s), last time on Apr 5 2009, 12:00 pm by Heinermann.

The gov'ment attacks are pretty much in like every article so you an look that up yourself but i can't find the article that mentioned the hospital thing. Basically what had happened was... Since confiker really affects outdated computers and those 5 hospitals didn't update since every time they would install a new update they had to restart the systems or w/e. Being a hospital i'd imagine 'keeping the systems' on is a really big deal.

Sounds legit.

Also, "$250,000 reward" is a joke when there's this much hype about a little program.