The Register reports that 3 in 10 windows PC are vulnerable to conficker attacks.This conficker remove article is about removing the conficker/ downadup virus and the relationship between conflicker and fake anti virus protection softwares. This conficker repair post will also provide you information on conficker virus removal tools that are available.
Downad / conficker symptoms
The conficker computer worm, also known as downup, downandup and Kido first surfaced in 2008 but as of January 17,IBN Live reports that 6.5 million computers have already been infected by this virus. When the downadup or conficker worm is executed in a PC, win 32 downadup virus disables systems such as the Windows Automatic Update, Windows Security Center, Windows Defender and Windows Error Reporting.
Conficker and fake anti virus protection softwares
It is also reported that there is a link between conficker and rogue antivirus protection tools. In April 2009, PC world reported that conficker actually installs rogue anti virus protection programs. These bogus pc security tools pretend to be legitimate security softwares but are actually malwares. A number of these fake anti virus protection softwares such as the ecovirus, cyber security virus and security tool virus are exposed in this site.
The downadup worm also gathers personal information and installs malware into the infected computer. The downadup worm also attaches to several windows processes including svchost.exe, explorer.exe and services.exe. Other symptoms are enumerated in this site: http://vil.nai.com/vil/content/v_153464.htm . Removing conficker virus from your system, fortunately, is possible.
Removing conficker worm
The easiest way to remove conficker is to use a conficker remover. but because the conficker worm also spreads through portable storage devices such as USB drives, disabling your PC’s autorun feature for external media is recommended. The following are conficker worm removal applications that you may want to check out:
Conficker Removers: Conficker Virus Remover Applications
Several Win32 conficker removal tools are now available. To remove conficker with a conficker remover, check out the following urls to Download downadup/conficker remover tools:
Symantec W32.Downadup Removal Tool http://www.symantec.com/content/en/us/global/removal_tool/threat_writeups/FixDownadup.exe
F-SECURE Malware Removal Tool: ftp://ftp.f-secure.com/anti-virus/tools/beta/f-downadup.zip
Microsoft’s Malicious Software Removal tool: http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
Remover conficker applications may be regularly updated to make conflicker virus removal efficient in removing new variants of this worm. Make sure to check out the respective developers’ site of these virus conficker removal tools.
The above conficker remove link downloads can be accessed by copying the urls to your favorite browser.
You can also read the following conficker virus removal articles to learn more how you can protect your PC from Conficker virus, repair conficker virus damage and how you can manually remove conficker:
Virus alert about the Win32/Conficker.B worm: http://support.microsoft.com/kb/962007
Protecting Against the Rampant Conficker Worm: http://www.pcworld.com/article/157876/conficker.html?loomia_ow=t0:a16:g2:r1:c0.364912:b21134527
Related articles:
antivirus system pro removal tool
additional guard virus
Updated November 26, 2009
Related posts:
- Conficker Virus Check No more ...
- Remove Confickr Virus with Free Conficker Remover Computers with conficker infection can’t access the websites of Symantec, Microsoft, Malwarebytes and other security companies’ websites. So what do you do if your PC is already infected by the confickr virus? Conficker virus fix : There are free...
- How to Avoid Conficker April 1 Virus Websites are buzzing about the conficker april 1 virus. Reportedly, the conficker c virus aka conflicker, kiddo and downadup will evolve on April 1 making it more difficult to remove. Many security experts, however, believe that the april 1...
- Conflicker Virus: Protection and Removal This article provides conflicker remove information as well as identify a conflicker virus removal tool that you can use to get rid of conflicker. ...
- Conficker E Detected on April 7 Trend Micro detected the Conficker E variant also known as WORM_DOWNAD.E on April 7, 2009. Conficker E Characteristics The Conficker E variant propagates itself through MS08-067 to external IPs if internet is available and uses local IPs if there...
- Conflicker Virus This post provides information on how to remove conflicker worm or the so called april 1 worm virus. If you suspect that there is a conflicker c activity in your PC, you may want to read this article on...
- Conficker E Removal The trend micro blog has reported about the emergence of the conficker.e variant on April 7 and those who have the conficker virus become target of fake security software such as the spyware 2009 and SpyProtect 2009 which promise...
April 23rd, 2009 at 11:20 am
hmm well i had one of the conflickers and i couldnt system restore couldnt open microsoft office cause i wasnt admin so this virus i had lost my rights
the only one thing to do is format or revoer data loss
April 19th, 2009 at 11:40 pm
I believe I have the virus and every link I try to use to remove the virus will not work. I cannot access any of my antivirus stuff. I need help. I am not computer savvy enough to figure this out!
April 14th, 2009 at 10:58 pm
someone i know just got a new comp and got infected before they could update security. Will reinstalling system to factory remove conficker? They don’t have any files to save so nothing needs to be backed up.
April 14th, 2009 at 9:04 am
Never mind i figured it out i have Internet Antivirus Pro.
April 14th, 2009 at 8:58 am
Edit: It also appears as Internet Antivirus Pro
April 14th, 2009 at 8:53 am
Okay i have this annoying pop up. It says Windows security center and how i need to do such and such. I used the link to remove the dreaded Conficker Virus. But the toll said I am not infected with it. So what is wrong with my computer any help please.
April 11th, 2009 at 9:49 am
[...] Additionally, the conficker worm virus reportedly shows hints on how it will be used by its creators to earn money. Researchers at Kaspersky Labs say that the conflicker worm virus downloads the fake security scanner Spyware Protect 2009 into conficker infected PCs in a bid to earn money from people looking for computer infection solution. The Spyware Protect 2009 rogue antivirus is advertised through pop up advertisements. There are free conficker removal tools however that you can use for conficker worm removal. You can check out this article on free Conficker removal programs. [...]
April 8th, 2009 at 8:40 pm
what is ever 1 talk about
April 8th, 2009 at 7:43 am
i believe that i have the virus. i first noticed it when i plug my usb in to my laptop and the autorun had been edited to fun a file it created in the recycle folder. i successfully removed all evidence of these files and folders but i cant run my anti virus software (paid version of AVG
plus now when ever i run photoshop my memory dumps every time. i have tried all the downloads but i still have the problem another thing is that this same thing happened to all my computers at home. i managed to open the file in text to check out its code. ignoring all the funny characters at th etop this is what i was left with “KERNEL32.DLL CreateTapePartition GetComputerNameA CloseHandle SetDefaultCommConfigA VirtualProtect DisableThreadLibraryCalls CreateFileA RtlZeroMemory GetShortPathNameA ExitProcess InitAtomTable BeginUpdateResourceA GetOEMCP CreatePipe GetFileAttributesExA ReadConsoleOutputW FreeLibrary WriteFile SetUnhandledExceptionFilter AllocConsole CreateFileW GetProfileIntA ReadFile GetThreadPriority ConvertDefaultLocale ADVAPI32.DLL AccessCheckAndAuditAlarmW SetFileSecurityW SetNamedSecurityInfoW CryptEnumProviderTypesW CryptContextAddRef GetKernelObjectSecurity GetMultipleTrusteeOperationA SetEntriesInAuditListA BuildExplicitAccessWithNameA GetLengthSid ConvertSecurityDescriptorToAccessW GetTrusteeTypeA LogonUserW”
my kernall32 file looks very messed up and was wondering if i download kernall32 file weather that could stuff my laptop up any further?
any advice and getting this virus out of my machine would be handy.
if i back up onto disks only the files i want eg music, vidoes, pictures and documents and then format the harddrive would this fix it?
April 7th, 2009 at 7:45 am
I have a problem, as well. (I wouldn’t be posting otherwise.) I am pretty sure that I got the Conflicker Virus, but I can’t use the programs or view the websites. Heck, I can’t even boot up! I turn on my computer, it tries to boot windows, then it says that it couldn’t. Then, it asks if I would like to run Windows Startup Repair. I hit enter, (yes), and it tries to run that. It fails, goes to a blue screen, then either turns off or resets. When I say that I want to start Windows normally, it says “Windows is loading files…” with a loading bar beneath it. When it gets to a certain point in loading, it stops and starts over. I then have to turn the machine off. I don’t know what to do about this, but I want to do something, myself, first. Before I take it to a professional, that is. Thanks for any help that you can give me!!!
- ZackCopy