News - Trend Micro detects new activity from Conficker worm

[HEXUS]

After the 1 April anticlimax, signs of life from the sophisticated worm have started to appear.

Read more.

[Splash]

I'll be watching http://isc.sans.org/diary.html?storyid=6157 closely. I've checked all networks I take care of using nmap and snort and they look to be clean, which is good.

[Jay]

we have seen some activity from this over the last few days.

Popups and error logs filling up due to brute force attempts

"The SAM database was unable to lockout the account of account-name due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above."

this is W32.Downadup.B