Go to Windows 7 Insider Guide
Eye chart can help diagnose Conficker
UPDATED on Thursday, April 9 at 12:30 p.m.: The original link to the eye chart broke, but a new, working one has replaced it.
April Fools' Day passed with much angst over and little action from the Conficker worm, but that doesn't mean it's not a threat.
Click on the image to be taken to the live eye chart.
(Credit: Screenshot by Seth Rosenblatt/CNET)Joe Stewart from SecureWorks has put together an effective "eye chart" that sources its graphics from sites that Conficker would block. Click here to test the eye chart. If you can't see one or more of the images, you're either infected, or image loading in your browser has been disabled.
Firefox users can check if image loading has been disabled under Tools/Options and the Content tab. Load Images Automatically should be checked. Internet Explorer users will find it under Tools/Internet Options, then the Advanced tab. Scroll down to Multimedia, and Show Pictures should be checked.
It's a test based on the fact that Conficker blocks legitimate security Web sites. The logos are sourced remotely, so if they can't load, the sites are also likely to be blocked. If you're seeing blocked images, you should check out the CNET guide to removing Conficker--just because the botnet hasn't done much that's demonstrably malicious yet doesn't mean it can't or won't in the future.
Seth peers into the deep, dark corners of software so that you don't have to. He has yet to suffer a single nightmare about OS/2. You can follow him on Twitter. 
luckily mine is clean. =)
<a href="http://puabuster.com>Dale Wesley</a>
Al
You have to click on the "eye chart" link to get the live test. And please don't tell me that only an idiot would not know to do that -- I deal with simple users everyday in on-line support.
I wish I'd known about this easy test before April 1. Would have saved a a lot of time spent trying to assure that my computer was protected (which I do anyway, but for this I did several tests or scans just to be sure).
steve
- by Joetwopointoh April 9, 2009 7:30 AM PDT
- So does the dreaded site not found error indicate their server has been overloaded by attempts to run the test or is it a sign that the recent awakening and update to confickr infected systems has added this test site to its blocked site list? lmao
- Like this Reply to this comment
-
-
- by srosenblatt April 10, 2009 9:54 AM PDT
- I think you might misunderstand how Conficker works and why these charts are useful. Since this particular virus blocks access to the Web sites that can remove it, remotely sourcing images from those sites will quickly reveal whether you've been infected--assuming your browser doesn't have images turned off. This kind of test will be useful for detecting a key symptom of Conficker until its programmers unblock anti-virus Web sites, and I don't think that's particularly likely right now.
- Like this
-
(22 Comments)People who post these types of tests really do have an obligation to keep abreast of the situation and posts updates as required.