Wednesday March 25, 2009, 7:40 pm
Story continued here :

But the Canadian Internet Registration Authority isn't taking any chances when it comes to the latest variant of the Conficker worm.


CIRA, which manages Canada's dot-ca (.ca) domain name registry, warned Tuesday that millions of computers running Microsoft's operating system may have been infected since the worm began spreading last fall.


Beginning April 1, the worm is expected to force infected computers to randomly generate and connect to 50,000 web URLs a day from 110 domains around the world, including dot-ca domains.


A secret "command-and-control" file instructing the worm to perform malicious actions could be hidden on any one of those URLs.


"This command-and-control computer that all of the infected computers are going to try to reach out to is hosted under a particular domain name," said Byron Holland, CIRA's president and CEO.


"This worm is quite smart, so what it does (is) it creates a smokescreen by generating a random list of many tens of thousands of domain names, among which the single domain name is associated with the command-and-control computer."


It's not known what - if anything - the worm's creators have in mind. They might overwhelm the Internet with spam, monitor keyboard strokes to collect passwords and banking information or delete files on a person's computer.


"Once a virus has control of an individual computer, it can effectively see what's happening in, or happening to, that computer," Holland said.


"At this point, we really don't know what the actual intent of this one is."


CIRA worked with security experts around the globe to "reverse engineer" the worm so they could find out which sites it will generate, Holland said.


As a preventative measure, the authority has now blocked 157,000 unregistered dot-ca domains expected to be generated by the worm, he added.


Microsoft released a patch in October to stop the worm from spreading. But newer variants are more sophisticated than the original worm and have continued to infect computers.


This latest variant of the worm, Conficker C, was identified in early March. An earlier variant, Conficker B, worked like this latest variant except that it generated a list of only 250 to connect to every day.


A cabal of Internet groups and companies, led by Microsoft, is offering $250,000 for information leading to the arrest and conviction of those responsible for the worm.


Roughly 1.2 million dot-ca domains are registered with CIRA.

Wednesday March 25, 2009, 10:06 pm
Thank you Rosemary for this very important news. Noted.

Thursday March 26, 2009, 3:24 am
Noted. Well done,Rosemary. Normally people here send cards, its so easy for someone bad to send stuff & people would realize till it was too late. TY.

Thursday March 26, 2009, 8:08 am
Noted and will forward. This IS real. I think I'll be out all that day anyhow, but many others will not be.

Thursday March 26, 2009, 11:23 am
Noted with thanks

Thursday March 26, 2009, 12:50 pm
Noted/thanks Rosemary

Thursday March 26, 2009, 5:47 pm
The New York Times also ran an article warning us... Thanks, Rosie..
Better safe than sorry!

Friday March 27, 2009, 9:42 am

"Perform the ultimate security upgrade for Windows - Change to a Mac Apple"

TY, Rosemary.

Friday March 27, 2009, 6:13 pm
Noted with thanks

Tuesday March 31, 2009, 9:53 pm
THANKS ROSEMARY,
THIS IS REALY A BAD THOUGHT, TO THINK IN AWHILE SOMEONE COULD DO SOO MUCH DAMAGE-THANKS FOR THE WARNING, I'LL PASS AROUND!!!
EVERYONE HERE AT CARE2 HAVE A SAFE APRIL FOOLS, WITH LOTS OF TONS AND TONS OF LAUGHTER!!!..:)..

Tuesday July 7, 2009, 4:25 pm
That's why I have a Macbook!