Diagnose Conficker With Web-Based Eye Chart

thomsomc writes "Joe Stewart from the Conficker Working Group has created an eye chart that allows for online identification of Conficker B and C infections. Using basic knowledge of the blacklisting that Conficker employs to avoid attempting to infect IPs that belong to popular Anti-Virus and security firms (including Microsoft), the group whipped up this very simple test to see if you can load content from the various pages. If you can see all of the images, you're more than likely Conficker-free. According to Honeynet, 'This detection method should be more reliable than network scanning based tests. Happy scanning!'" Related: Tech Fragments notes in passing that nothing much seems to have come of conficker's dreaded April 1 deadline.

Comments

Jon Stewart?

[ender1598]

Am I the only one that read it as Jon Stewart and then spent a few minutes trying to figure out the joke on the page?

Re:Jon Stewart?

[Anonymous Coward]

Haha, me too. Give this a !jonstewart tag.

Re:Jon Stewart?

[RevRagnarok]

Just another flaw in the system.

Come and see the flaws inherent in the system! Help! Help! I'm being modded down!

Re:Jon Stewart?

[Bootarn]

I love the sweet irony of including links to alternate OSes in the test. If those dissapear, is it possible that you're infected with a Microsoft made worm?

Re:Jon Stewart?

[moxley]

This perfectly illustrates one of the unspoken rules of Slashdot culture:

*If the sole point of your post is to either complain, call a moderation unfair, or ask for an explanation about a moderation, be prepared for your post to be modded in exactly the same way.*

It's really a wonderful cultural practice, and is preparing interworldnettubez denizens everywhere for what they can expect when asking similar questions of real world "moderators" like cops and politicians.

Let's all keep up the good work!

 

I see a dog.

[memorycardfull]

Dog with head split in half.

Re:I see a dog.

[interkin3tic]

Funny, I see a penguin, a blowfish, the devil, and some boring corporate logos. No dogs. You must have Confiker R variant (Rorschach variant)

Re:I see a dog.

[agnosticanarch]

I was going to explain it, but I got caught up looking at the pretty butterfly.

Re:I see a dog.

[JWSmythe]

    Well, there are only two kinds of people in the world. Those with ADD and ......

   

Lynx support?

[MrEricSir]

Come on, it doesn't work in Lynx? I want my money back.

Re:Lynx support?

[MBCook]

Works here.

You must be infected.

Re:sweet

[ShieldW0lf]

a nice, easy, reliable way to detect a conficker infection.

As long as it doesn't get slashdotted... that might cause a new panic :P

Thank god

[diablovision]

Whew, I haven't had that much relief since I accidentally ate that whole jar of exlax....

Re:Thank god

[iknowcss]

I think it goes "since I accidentally the whole jar of exlax"

Re:Very nice & interesting technique

[bhtooefr]

My HOSTS file uses data from reputable sources like STOPBADWARE.ORG

Sucks when / is blocked, now, isn't it? :)

Slashdotted

[56]

Looks like it's slashdotted... or my ubuntu machine has Conficker!

Mirror

[Anonymous Coward]

Conficker Eye Chart

Conficker Eye Chart

How to interpret:

If you see this above:It probably means this:

= Normal/Not Infected by Conficker (or using proxy)
= Possibly Infected by Conficker (C variant or greater)
= Possibly Infected by Conficker A/B variant
= Image loading turned off in browser?
Any other combination= Poor Internet connection?

Explanation:

Conficker (aka Downadup, Kido) is known to block access to over 100 anti-virus and security websites.

If you are blocked from loading the remote images in the first row of the top table above (AV/security sites) but not blocked from loading the remote images in the second row (websites of alternative operating systems) then your Windows PC may be infected by Conficker (or some other malicious software).

If you can see all six images in both rows of the top table, you are either not infected by Conficker, or you may be using a proxy server, in which case you will not be able to use this test to make an accurate determination, since Conficker will be unable to block you from viewing the AV/security sites.

F-Secure and the F-Secure Logo are trademarks of F-Secure Corporation.

SecureWorks and the SecureWorks Logo are registered trademarks of SecureWorks Inc.

Trend Micro and the T-Ball logo are trademarks or registered trademarks of Trend Micro Inc.

Re:sweet

[RiotingPacifist]

i panicked for a sec, im on linux but thanks to virgin media the bottom two images didn't load. thankfully the chart said: any other combo = shite internet!

Oh shit

[atomicthumbs]

I can't see the chart at all! Shit shit shit!

Pick your punchline

[Comboman]

Am I the only one that read it as Jon Stewart and then spent a few minutes trying to figure out the joke on the page?

Pick your "Daily Show"-style punchline for this story:

• If we can diagnose computer viruses with an eye-chart, does that mean McAffee can tell me if I need glasses?
• Users of dual-boot computers should consult the bifocal eye-chart.
• Your mother was right! If your computer visits those nasty virus-infected pron sites, you WILL go blind.

Re:Pick your punchline

[drik00]

I say this with love... keep your day job.

Re:sweet

[Chabil Ha']

The chart or the virus?

Oops

[Wilson_6500]

Considering how quickly and effectively we managed to slashdot this helpful site, It's pretty obvious that we are the worms.

Re:sweet

[supernova_hq]

Considering he is hot-linking images to 3 other servers, he is potentially slashdotting 4 servers with 1 link!!!

Another option for the eye chart

[fava]

And if you can see the top row and not the bottom one it means you work at Microsoft.

Re:sweet

[Matt Perry]

shite internet!

Just be glad you aren't using Sunni internet.

Re:How long before...

[Ian Alexander]

Maybe I shouldn't give them ideas. I bet the author of Confickr reads slashdot.

Considering that s/he actually gets shit done I highly doubt it.

Re:sweet

[hawk]

*shudder*

That's totally out of control. Page after page of shameless hussies lifting their burkas to flash their ankles!

hask