Support1000

What is Conficker Worm / Virus

· Conficker is a worm that can affect your computer and spread itself on the Network without your interaction.

· It spread through file sharing on the network and removable disk when it execute Auto run function when it is plugged in to USB drive

· Conficker worm disable important services on your computer.

· Conficker prevent computer from doing Windows Update and Antivirus update by disabling update service on your computer.

How to protect from being affected by Conficker Worm

· US-CERT recommended that Windows users apply Microsoft security patch MS08-067 to help provide protection against the worm.

Click here to download the patch for Windows XP

Click here to download patch for Windows Vista

· This patch prevents an attacker from remotely taking control of an infected computer system and installing additional malicious software.

· Keep your Antivirus updated and perform a complete scan.

· Disable Autoplay features (Autoplay is the pop-up that ask you what to do when you plug in any USB drive or when you insert CD/DVD). Click here to disable Autorun features.

Remove Conficker Worm

· Do complete Virus scan with the updated Antivirus software

· Remove the Scheduled Task.

Click Start -> Run -> CMD -> type AT /Delete /Yes and press enter

· Remove the Startup entries from the registry

Click Start -> Run -> Regedit -> Ok

Navigate to following locations and remove suspected entries from the left pane of the windows

§ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

§ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

· Make sure TCP Receive Window Auto-tuning is enabled for Windows Vista

Click Start -> Run -> CMD -> type netsh interface tcp set global autotuning=normal press enter

After performing these steps do Windows Update (http://update.microsoft.com/windowsupdate/ )