Microsoft has published new information today on the following web pages:
- Microsoft Conficker guidance page for IT Professionals and those focused on security in the enterprise
- Microsoft Conficker guidance page for consumers and home users
- The Microsoft Malware Protection Center (MMPC) encyclopedia page for theConficker family of malware
- The Microsoft Malware Protection Center blog
- The Microsoft Security Response Center Blog
ANSWERS TO COMMON QUESTIONS
Q: What will happen on April 1, 2009?
A: Based on our collective technical analysis, we've determined that systems infected with the latest version of Conficker will begin to use a new algorithm to determine what domains to contact. We have not identified any other actions scheduled to take place on April 1, 2009.
Q: Will an updated version of Conficker go out to already-infected systems on April 1, 2009?
A: It is possible that systems with the latest version of Conficker will be updated with a newer version of Conficker on April 1, 2009 by
contacting domains on the new domain list. However, these systems could be updated on any date before or after April 1, 2009 including via the "peer-to-peer" updating channel in the latest version of Conficker.
Q: Should the general public be alarmed? Why or why not?
A: No, the general public should not be alarmed. Most home users have been protected by Microsoft Security Update MS08-067
(http://www.microsoft.com/
Q: What should people who are worried about April 1, 2009 and Conficker do?
A: We recommend that home users who have not yet enabled automatic updates do so and ensure their security software is up to date with the latest antivirus signatures for the antivirus product they use.
