Home Spyware Database "Conficker Removal Guide"

Conficker Removal Guide

Conficker Description

How can I Remove Conficker?

The most common spyware removal tactic is to uninstall Conficker by using the "Add/Remove Programs" utility. However, as there may still be hidden Conficker files, it's possible that Conficker will reappear after reboot. Follow the Conficker detection and removal methods below.

Free Conficker or W32/Conficker.worm Automatic Removal (Recommended)

Is your PC infected with Conficker? To safely & quickly remove Conficker, we highly recommend you...

Download Free Conficker Removal Tool for Conficker.

Conficker Manual Removal Instructions

Below is a list of Conficker manual removal instructions and Conficker components listed to help you remove Conficker from your PC. Backup Reminder: Always be sure to back up your PC before making any changes.

Note: This manual removal process may be difficult and you run the risk of destroying your computer. We recommend that you Download Free Conficker Removal Tool to remove Conficker.

Step 1 : Use Registry Editor to Remove Conficker Registry Values

1. To open the Registry Editor, go to Start > Run > type regedit and then press the "OK" button.
2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
3. To delete "Conficker" value, right-click on it and select the "Delete" option.
4. Locate and delete "Conficker" registry entries:
5. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost, netsvcs = %Previous data% and %Random% HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHO WALLCheckedValue = dword:00000000 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\"ImagePath" = %SystemRoot%\system32\svchost.exe -k netsvcs HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\"ServiceDll" = "[PATH OF WORM]"
   Read more about How to Remove Conficker Registry Entries

Step 2 : Use Windows Command Prompt to Unregister Conficker DLL Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the "OK" button.
2. Type "cd" in order to change the current directory, press the "space" button, enter the full path to where you believe the Conficker DLL file is located and press the "Enter" button on your keyboard. If you don't know where Conficker DLL file is located, use the "dir" command to display the directory's contents.
3. To unregister "Conficker" DLL file, type in the exact directory path + "regsvr32 /u" + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u Conficker.dll) and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
4. Search and unregister "Conficker" DLL files:
5. %All Users Application Data%\[RANDOM FILE NAME].dll %Program Files%\Movie Maker\[RANDOM FILE NAME].dll %Program Files%\Internet Explorer\[RANDOM FILE NAME].dll %Temp%\[RANDOM FILE NAME].dll vhoinp.dll %System%\[RANDOM FILE NAME].dll
   Read more about How to Remove Conficker DLL Files

Step 3 : Detect and Delete Other Conficker Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the "OK" button.
2. Type in "dir /A name_of_the_folder" (for example, C:\Spyware-folder), which will display the folder's content even the hidden files.
3. To change directory, type in "cd name_of_the_folder".
4. Once you have the file you're looking for type in "del name_of_the_file".
5. To delete a file in folder, type in "del name_of_the_file".
6. To delete the entire folder, type in "rmdir /S name_of_the_folder".
7. Select the "Conficker" process and click on the "End Process" button to kill it.
8. Remove the "Conficker" processes files:
9. %Temp%\[Random].tmp %System%\[Random].tmp %All Users Application Data%\[RANDOM FILE NAME].dll %Program Files%\Movie Maker\[RANDOM FILE NAME].dll %Program Files%\Internet Explorer\[RANDOM FILE NAME].dll %Temp%\[RANDOM FILE NAME].dll vhoinp.dll %System%\[RANDOM FILE NAME].dll
   Read more about How to Delete Harmful Files

Conficker Recommendation

RECOMMENDED: To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good malware remover to track Conficker and automatically remove Conficker as well as other spyware, adware, trojans, and virus threats in your PC.

If you believe you have Conficker installed on your computer, remove Conficker with our Free Conficker Removal Tool.

To learn more on Conficker, see our Conficker resource section below.

Conficker Technical Details

The following Conficker components and their MD5s:

More Conficker Resources

What is Worms?

Conficker is a type of Worms.

Worms are virus-like malware with destructive codes, and are able to mutate, replacing their own code by themselves. This makes worms very dangerous, hard to find, and difficult to delete. Like most viruses, worms may spread to the other computers by secretly emailing themselves to Internet users in your address book. The key difference between a worm and a virus is that worms replace your files, rather than simply inserting themselves into your files.

Think you have Conficker? Download Free Conficker Removal Tool and automatically remove Conficker on your PC.

Back to Top

Conficker Prevention Rules

Protect your computer from Conficker and other spyware by following these four easy prevention rules.

Rule #1: Keep your Windows Security up-to-date

Microsoft provides updates weekly and can always be downloaded manually from the Microsoft website.
Tip: Regularly visit Windows Update and set your computer to receive security & critical updates automatically.

To get Microsoft Update, go to IE > Tools > Windows Update > Product Updates, and select "ALL High-Priority Security Updates" from the list.

Then open IE and go to Internet Options > Security > Internet, then press "Default Level", then OK. Now press "Custom Level."

Rule #2: Download and install a reliable anti-spyware software

A good anti-spyware software that recognizes current Conficker spyware as well as other forms of spyware can can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively reverse the damage of your computer and remove Conficker automatically.

Download Free Conficker Removal Tool for Conficker.

Rule #3: Install and keep your firewall turned on

A firewall is essential for a complete protection of your PC. Make sure that your firewall is always turned on. A firewall can prevent unwanted software like Conficker from infecting your computer.

Rule #4: Keep your anti-spyware definitions up-to-date

Since new Conficker files can be created every day, it is important to keep your anti-spyware program up-to-date. Your anti-spyware scanner should have an update feature where with a click of a button you can get new spyware definitions instantly. Often, an anti-spyware software will open an update window reminding you that there are new updates available.

Back to Top

User Comments

Back to Top