Remove Conficker.C Worm

How to remove Conficker.C Worm

Please do the following steps to fix the problem

Step 1

↣ Click Start Menu  >>  Click on the Run Button
↣ In the open space in the Run box, type : cmd
↣ Click OK.
↣ Type cd..  and then press Enter.
↣ Repeat the previous step until you get to the root level, or C:\>.
↣  At C:\> type the following: net stop dnscache Press Enter.
↣ This disables the domain blocking feature of Conficker and you should now be able to reach security Web sites.

Step 2

↣ Click on the Start Menu  >>  Click Search Button
↣ Type the name of the files to be searched in the open space
↣ * %Windows%\System32\[Random].dll :  * %Program Files%\Internet Explorer\[Random].dll :
↣ * %Program Files%\Movie Maker\[Random].dll
↣ To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.

Step 3

↣ Use Registry Editor to Remove Conficker.C Worm
↣ To open the Registry Editor, Click the  Start Menu  > > Click the Run Button  > > In the open space type “regedit” and then press the OK button.
↣ The registry entries that  we have to remove are

↣ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHO WALLCheckedValue = dword:00000000 
↣ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost,netsvcs = %Previous data% and %Random%  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\  DisplayName = %ServiceName%
↣ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random]\Parameters  ServiceDll = %MalwarePath%
↣ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\”ServiceDll” = “Path to worm” 
↣ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\”ImagePath” =%SystemRoot%\system32\svchost.exe -k netsvcs
↣ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters “TcpNumConnections” = dword:0×00FFFFFE

conficker removal tool conficker scanner conficker worm removal windows xp how does conficker worm spread conficker removal tool kaspersky