How to remove Conficker.C Worm

Remove Conficker.C Worm

How to remove Conficker.C Worm

Please do the following steps to fix the problem

Step 1

 Click Start Menu  >>  Click on the Run Button
 In the open space in the Run box, type : cmd
 Click OK.
 Type cd..  and then press Enter.
 Repeat the previous step until you get to the root level, or C:\>.
  At C:\> type the following: net stop dnscache Press Enter.
 This disables the domain blocking feature of Conficker and you should now be able to reach security Web sites.

Step 2

 Click on the Start Menu  >>  Click Search Button
 Type the name of the files to be searched in the open space
 * %Windows%\System32\[Random].dll :  * %Program Files%\Internet Explorer\[Random].dll :
 * %Program Files%\Movie Maker\[Random].dll
 To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.

Step 3

 Use Registry Editor to Remove Conficker.C Worm
 To open the Registry Editor, Click the  Start Menu  > > Click the Run Button  > > In the open space type “regedit” and then press the OK button.
 The registry entries that  we have to remove are

 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHO WALLCheckedValue = dword:00000000 
 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost,netsvcs = %Previous data% and %Random%  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\  DisplayName = %ServiceName%
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random]\Parameters  ServiceDll = %MalwarePath%
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\”ServiceDll” = “Path to worm” 
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\”ImagePath” =%SystemRoot%\system32\svchost.exe -k netsvcs
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters “TcpNumConnections” = dword:0×00FFFFFE

conficker removal tool conficker scanner conficker worm removal windows xp how does conficker worm spread conficker removal tool kaspersky

Leave a Reply

Scroll to top