Conflicker

I have a conflicker on my computer which bitdefender probably not detect it.

This is the message I got recently

I know this is a conflicker beside I search in on search engine, it's also because my friend just insert his usb storage, move it to his computer (with free antivirus inside it) and his antivirus detect a conflicker virus. I have scanned my computer maybe two times but found nothing.

Can someone help me?

Thanks

Find more posts tagged with

Comments

AndreiRC

Unless I am misreading that image, that is not the Conficker virus, mate. It is an EICAR file. It's a file designed to test antivirus programs.

Read more about it here:

http://en.wikipedia.org/wiki/EICAR_test_file

unknown

Hello,

To scan the computer for the Conficker please save then run this tool .

The location of the file looks suspicious. Please follow this link and send me by PM the requested logs.

Regards,

justuser

Hello,

To scan the computer for the Conficker please save then run this tool .

The location of the file looks suspicious. Please follow this link and send me by PM the requested logs.

Regards,

@Dany

ok thanks will post the results later I'm on a really bad inet connection right now.

To above DanyDan

Yes I know that Eicar is a test file but I suspect that a real Eicar will access that IP.. You can try google that Ip on the image you will know what it is.

justuser

@Dany

ok thanks will post the results later I'm on a really bad inet connection right now.

To above DanyDan

Yes I know that Eicar is a test file but I suspect that a real Eicar will NOT access that IP.. You can try google that Ip on the image you will know what it is.

Update : This is the test results

BITDEFENDER Removal Tool for Win32.Worm.Downadup.Gen

--> Scanning..

Ok Loading BitDefender Engines

State 1 of m :

Ok killing explorer.exe

Ok killing processes32.exe

Found Service Process..attempting to kill..

Process kill -> OK 0x770

Sleeping 3 seconds...

Searching for Downadup file ....

Searching in : C:\WINDOWS\system32\

* taking ownership of the file -> C:\WINDOWS\system32\cjyzx.dll

Detected with : Win32.Worm.Downadup.Gen

Found : C:\WINDOWS\system32\cjyzx.dll

Searching in : C:\WINDOWS\Temp\

Searching in : C:\DOCUME~1\Joey\LOCALS~1\Temp\

* taking ownership of the file -> C:\DOCUME~1\Joey\LOCALS~1\Temp\nsj3.tmp

* taking ownership of the file -> C:\DOCUME~1\Joey\LOCALS~1\Temp\WCESLog.log

* taking ownership of the file -> C:\DOCUME~1\Joey\LOCALS~1\Temp\~DF8580.tmp

* taking ownership of the file -> C:\DOCUME~1\Joey\LOCALS~1\Temp\~DFD80C.tmp

Searching in : C:\Program Files\Internet Explorer

Searching in : C:\Program Files\Movie Maker

Searching in : C:\Documents and Settings\All Users\Application Data\

Searching in : C:\Documents and Settings\Joey\Application Data\

Searching in : C:\DOCUME~1\Joey\LOCALS~1\Temp\

* taking ownership of the file -> C:\DOCUME~1\Joey\LOCALS~1\Temp\nsj3.tmp

* taking ownership of the file -> C:\DOCUME~1\Joey\LOCALS~1\Temp\WCESLog.log

* taking ownership of the file -> C:\DOCUME~1\Joey\LOCALS~1\Temp\~DF8580.tmp

* taking ownership of the file -> C:\DOCUME~1\Joey\LOCALS~1\Temp\~DFD80C.tmp

Found so far : 0x1 files/regs

--> Virus found. Starting Cleaning process

State 0 of m :

Deleting : C:\WINDOWS\system32\cjyzx.dll

Try to delete number 1

Ok deleting file : C:\WINDOWS\system32\cjyzx.dll

Internet Temp : C:\Documents and Settings\Joey\AppData\Local\Microsoft\Windows\Temporary Internet Files

Internet Temp : C:\Documents and Settings\Joey\Local Settings\Temporary Internet Files

Disinfection complete. Please restart the computer

--> Your computer was healed. Please restart!

Thank you Dany!!

chrislee35

That conficker sinkhole, 143.215.143.11, has the eicar test file on it to try to trip more IDS devices so that network administrators will notice the conficker infections on their networks. This was done back in December and has, for the most part, been a huge failure--i.e., it has not had an appreciable effect on conficker infections.