After studying the Conficker virus, three security experts have developed special scanning software that will allow network administrators, those who manage computer systems for large organizations and corporations, to remotely identify infected computers that are owned and used by their companies. In the course of the current computer virus outbreak the focus of concern has been less on the computers used by consumers at home, most of whom have been diligent in applying the latest Windows updates and running anti-virus software, and instead on the large networks of office computers scattered where the sheer numbers of computers in use has allowed some to avoid receiving the latest updates.
The difficulty for those who manage such large operations has been in identifying which computers have become infected. The Conficker virus was created with the crafty ability to hide its infection, patching computers it has entered to make them look as if they had the latest Windows updates and were clean.
Security researchers Tillmann Werner and Felix Leder of the nonprofit Honeynet Project, along with security expert Dan Kamisnky were able to uncover a weakness within the Conficker virus' code, one that has allowed them to quickly create a scanning program that they are offering as a free download for network operators.
The scanning program itself isn't designed for consumers, but rather for security experts and IT department staff who will need to quickly scan large corporate networks for infections before the April 1st deadline.
The Conficker virus is an evolving worm that has managed to infect millions of Windows-based computers around the world. Although basic Windows updates and anti-virus software is enough to provide reasonable protection from infection, the virus itself is very sophisticated and capable of organizing the large number of computers that have become infected into an orchestrated attack. These computers will receive special instructions on April 1st and whether that will trigger a spam or credit card-collecting operation or a more damaging disruption to the internet, no one can predict. Security experts around the world are moving quickly to block the virus and the scanning tool announced today will help with that endeavor.