That’s because Conficker blocks you from reaching any web address that includes Microsoft, Symantec, McAfee, AVG, Kaspersky, Trend Micro, F-Secure, Panda, Sophos, SecureWorks or Sunbelt in the URL. It also blocks URLs that contain 103 other names and phrases that relate to security. You can see the full list by clicking to SRI International's repor there and scrolling down to the table listed under "domain lookup prevention." To get a full understanding of how jammed-packed Conficker is with sophisticated self-spreading and self-preserving features see this FAQ and this timeline.
Monday, April 6, 2009
How to diagnose and defeat the dangerous Conficker worm
Want to quickly find out if your PC might be one of the millions infected by Conficker? Try clicking to Microsoft.com. Next try Symantec.com. Now try McAfee.com. If you can get to these sites, you're cool. But if your browser will not let you access any of these websites, then you very likely are infected with Conficker.