Win32/Conficker.AA Description

Win32/Conficker.AA, also known as W32/Worm.AHGV, Win32.Worm.Downadup,, Worm:Win32/Conficker, W32/Conficker.worm.gen, and Mal/Conficker, is a malicious worm that spreads to computers in a local network by utilizing Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability. The Win32/Conficker.AA worm can perform numerous hideous actions on your PC.

» Learn more about SpyHunter's Spyware Detection Tool
and steps to uninstall SpyHunter.

Win32/Conficker.AA worm can block your access to security websites as well as erase System Restore points before infecting your computer. Win32/Conficker.AA will remove all NTFS file permissions, with the exception of execute and directory traversal files in order to shield itself from being deleted.

Win32/Conficker.AA Automatic Detection Tool (Recommended)

Is your PC infected with Win32/Conficker.AA? To safely & quickly detect Win32/Conficker.AA we highly recommend you run the malware scanner listed below.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\[Random Name].dll
    2 %Program Files%\Internet Explorer\[Random Name].dll
    3 %Program Files%\Movie Maker\[Random Name].dll
    4 %System32%\[Random Name].dll
    5 %Temp%\[Random Name].dll

Related Posts

Posted: January 12, 2009 | By
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Threat Metric
Threat Level: 5/10
Home Malware ProgramsWorms Win32/Conficker.AA

Leave a Reply

What is 14 + 8 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)