Remove Conficker.C Worm
How to remove Conficker.C Worm
Please do the following steps to fix the problem
Step 1
↣ Click Start Menu >> Click on the Run Button
↣ In the open space in the Run box, type : cmd
↣ Click OK.
↣ Type cd.. and then press Enter.
↣ Repeat the previous step until you get to the root level, or C:\>.
↣ At C:\> type the following: net stop dnscache Press Enter.
↣ This disables the domain blocking feature of Conficker and you should now be able to reach security Web sites.
Step 2
↣ Click on the Start Menu >> Click Search Button
↣ Type the name of the files to be searched in the open space
↣ * %Windows%\System32\[Random].dll : * %Program Files%\Internet Explorer\[Random].dll :
↣ * %Program Files%\Movie Maker\[Random].dll
↣ To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.
Step 3
↣ Use Registry Editor to Remove Conficker.C Worm
↣ To open the Registry Editor, Click the Start Menu > > Click the Run Button > > In the open space type “regedit” and then press the OK button.
↣ The registry entries that we have to remove are
↣ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHO WALLCheckedValue = dword:00000000
↣ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost,netsvcs = %Previous data% and %Random% HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ DisplayName = %ServiceName%
↣ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random]\Parameters ServiceDll = %MalwarePath%
↣ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\”ServiceDll” = “Path to worm”
↣ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\”ImagePath” =%SystemRoot%\system32\svchost.exe -k netsvcs
↣ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters “TcpNumConnections” = dword:0×00FFFFFE
conficker removal tool conficker scanner conficker worm removal windows xp how does conficker worm spread conficker removal tool kaspersky