Conficker Eye Chart


How to interpret:

If you see this above:It probably means this:
All images displayed= Normal/Not Infected by Conficker (or using proxy)
Security/AV logos not displayed= Possibly Infected by Conficker (C variant or greater)
Some security/AV logos not displayed= Possibly Infected by Conficker B variant
No images displayed= Image loading turned off in browser?
Any other combination= Poor Internet connection?



Conficker (aka Downadup, Kido) is known to block access to over 100 anti-virus and security websites.

If you are blocked from loading the remote images in the first row of the top table above (AV/security sites) but not blocked from loading the remote images in the second row (websites of alternative operating systems) then your Windows PC may be infected by Conficker (or some other malicious software).

If you can see all six images in both rows of the top table, you are either not infected by Conficker, or you may be using a proxy server, in which case you will not be able to use this test to make an accurate determination, since Conficker will be unable to block you from viewing the AV/security sites.



I'd like to thank Joe Stewart, of SecureWorks and for making this simple and innovative tool available.

This mirror of the test is hosted by TalkBiz News. If you run a business online, consider subscribing.

You are encouraged to pass this URL on to others, so they can test their systems and clear the malware from them if they've gotten infected.

F-Secure and the F-Secure Logo are trademarks of F-Secure Corporation.
SecureWorks and the SecureWorks Logo are registered trademarks of SecureWorks Inc.
Trend Micro and the T-Ball logo are trademarks or registered trademarks of Trend Micro Inc.
The Conficker Eye Chart is a concept by Joe Stewart.
Copyleft 2009.