Support1000

What is Conficker Worm / Virus

·         Conficker is a worm that can affect your computer and spread itself on the Network without your interaction.

·         It spread through file sharing on the network and removable disk when it execute Auto run function when it is plugged in to USB drive

·         Conficker worm disable important services on your computer. 

·         Conficker prevent computer from doing Windows Update and Antivirus update by disabling update service on your computer.

How to protect from being affected by Conficker Worm

·         US-CERT recommended that Windows users apply Microsoft security patch MS08-067 to help provide protection against the worm. 

Click here to download the patch for Windows XP

Click here to download patch for Windows Vista

·         This patch prevents an attacker from remotely taking control of an infected computer system and installing additional malicious software.

·         Keep your Antivirus updated and perform a complete scan.

·         Disable Autoplay features (Autoplay is the pop-up that ask you what to do when you plug in any USB drive or when you insert CD/DVD).  Click here to disable Autorun features.

Remove Conficker Worm

·         Do complete Virus scan with the updated Antivirus software

·         Remove the Scheduled Task. 

Click Start -> Run -> CMD -> type AT /Delete /Yes and press enter

·         Remove the Startup entries from the registry

Click Start -> Run -> Regedit -> Ok

Navigate to following locations and remove suspected entries from the left pane of the windows

§  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

§  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

·         Make sure TCP Receive Window Auto-tuning is enabled for Windows Vista

Click Start -> Run -> CMD -> type netsh interface tcp set global autotuning=normal press enter

After performing these steps do Windows Update (http://update.microsoft.com/windowsupdate/ )