MS forms anti-Conficker alliance

Industry group to combine efforts, reward offered.

Microsoft has announced a collaborative effort to combat the Conficker (aka Downadup) botnet, the widespread infection making headlines over the past few weeks. In addition, Microsoft is offering a reward for information leading to the arrest of the botnet's creators.

confidence-2012

The partnership includes web management groups such as ICANN and the Public Internet Registry, major online players such as AOL and VeriSign, and security firms including Symantec, F-Secure and Arbor Networks. They will work together, sharing information and resources with the aim of disrupting the activities of the botnet and bringing it down.

Microsoft combined the announcement with news that a reward of $250,000 is being made available as an incentive for anyone with information on those behind the malware infection. The move revives an old programme of rewards, which was previously effective in tracking down the creator of the notorious Sasser worm.

Microsoft's announcement of both the partnership and the reward is here. More on the project is blogged by alliance members ShadowServer here and Symantec here, with news coverage of the reward offer at The Register here.

13 February 2009

Tags: botnet, cybercrime, industry, microsoft, reward.   

 del.icio.us  digg this! digg this

7 comments

What the hell does it do and what do we look out for? Surely making this information availible to all is will go some way to solving the problem.

by Nicholas, 27 February 2009, 20:59

I have a virus on my computer it keeps coming up RegistrySmart {SBI $A6ED8F18} and 1 entries Malware had over 200 infected can't get out. do u think it has anything to do with anti-Conficker alliance, please help me. thank you

by Helen C. Andrewsen, 05 March 2009, 17:56

My computer has been inf ected with the conficker virus (W32/Conficker!mem trojan and the W32/Conficker.worm.gen.a virus). Is there a way for me to remove & repair this?

by Patrick Quigley, 21 March 2009, 13:53

Patrick: firstly, check with your antivirus vendor. Alternatively, Microsoft's support page on the issue is here: http://support.microsoft.com/kb/962007

by Martijn Grooten, 25 March 2009, 11:38

conficker, doesn't do anything sides spread and allow someone to remote access all the computers infected with it.

I'm sure it is to late to find who started it conficker do to the fact it had infected so many computers already. i'm sure they won't be sending instructions them self. There is probly another part of conficker that will send out the instructions.

Example: A first virus was spread to do the final instructions to a few computers or servers, so it won't be found he made a second part that will be kinda like the middle man.

100% that is what it ends up being. if they are smart they would make it so if they don't respond to it within 2-3 days it will be set off.

by bigstrappa, 02 April 2009, 00:30

conficker, doesn't do anything sides spread and allow someone to remote access all the computers infected with it.

I'm sure it is to late to find who started it conficker do to the fact it had infected so many computers already. i'm sure they won't be sending instructions them self. There is probly another part of conficker that will send out the instructions.

Example: A first virus was spread to do the final instructions to a few computers or servers, so it won't be found he made a second part that will be kinda like the middle man.

100% that is what it ends up being. if they are smart they would make it so if they don't respond to it within 2-3 days it will be set off.

by bigstrappa, 02 April 2009, 00:30

Conficker prevents you from accessing websites that are able to remove the virus (example: Microsoft.com, Symantec.com, etc.) and it doesn't allow your anti-virus software to download the latest update files.

I got rid of Conficker by downloading a removal program from Cnet.

http://download.cnet.com/Symantec-W32-Downadup-Removal-Tool/3000-2239_4-10911656.html?tag=mncol

It takes a very long time for it to scan your system (2-3 hours) but eventually Conficker will be removed.

by James, 02 June 2009, 04:43

Leave a comment

Quick Links

Poll
Does your company allow you to use a personal laptop/mobile device to access company resources?
Yes, it's allowed
Yes, it's actively encouraged
No
I don't know
Leave a comment
View 2 comments

Ciso-Intelligence

VB2012
VB2012 VB2012 will take place 26 - 28 September 2012 at the Fairmont Dallas hotel, Dallas, TX, USA.

Virus Bulletin currently has 225,281 registered users.