Jump to content
Tuts 4 You

Conficker "eye chart"


What

Recommended Posts

Joe Stewart from SecureWorks has put together an effective "eye chart" that sources its graphics from sites that Conficker would block. If you can't see one or more of the images, you're either infected, or image loading in your browser has been disabled.

Firefox users can check if image loading has been disabled under Tools/Options and the Content tab. Load Images Automatically should be checked. Internet Explorer users will find it under Tools/Internet Options, then the Advanced tab. Scroll down to Multimedia, and Show Pictures should be checked.

It's a test based on the fact that Conficker blocks legitimate security Web sites. The logos are sourced remotely, so if they can't load, the sites are also likely to be blocked. If you're seeing blocked images, you should check out the CNET guide to removing Conficker--just because the botnet hasn't done much that's demonstrably malicious yet doesn't mean it can't or won't in the future.

Original Post:

http://www.nsaneforums.com/?showtopic=18612

Eye Chart:

http://anonym.to/?http://www.confickerworkinggroup.org/infection_test/cfeyechart.html
Edited by What
  • Like 1
Link to comment
Share on other sites

  • 4 months later...

yes, I've also wrote about it recently in my blog,

http://s-genius.blogspot.com/2009/08/conficker-eye-chart.html
Edited by __Genius__
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...