How to remove Conficker
General Information: Conficker is a virus known as a worm. When this worm is downloaded to your PC it can spread extremely fast without anyone manually spreading it. the Conficker worm can automatically attach itself to USB drives, or other external saving device and once put on the medium, it is capable of spreading to any pc the USB drive comes in contact with. symptoms of having the Conficker worm are: users blocked out of system directories, blocking of access to security websites and applications like windows automatic update, security center and others, and all system restore points you’ve created being deleted. if it remains on a users PC it will download more malware to the machine causing further problems.
Conficker Removal: the conficker worm can be removed by first deleting the .DLL files associated with the worm, they found in: %System%[Random].dll, %Program Files%Internet Explorer[Random].dll, %Program Files%Movie Maker[Random].dll, %All Users Application Data%[Random].dll, %Temp%[Random].dll. Once those are deleted we need to delete files associated with conficker those files are found here: %System%[Random].tmp, %Temp%[Random].tmp
Registry Entries that should be removed:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices{random}Parameters”ServiceDll” = “Path to worm”
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices{random}”ImagePath” = %SystemRoot%system32svchost.exe -k netsvcs
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters
“TcpNumConnections” = dword:0x00FFFFFE
Please Contact Us Here for more information on Conficker
Need help removing Conficker or other PC problems? E-Mail Us Here
Leave a Reply
You must be logged in to post a comment.