Computer Worms – Conficker
Is my computer infected with the Conficker worm?
Probably not. Microsoft released a security update in October 2008 (MS08-067) to protect against Conficker.
If your computer is up-to-date with the latest security updates and your antivirus software is also up-to-date, you probably don’t have the Conficker worm.
If you are still worried about Conficker, follow these steps:
- Go to http://update.microsoft.com/microsoftupdate to verify your settings and check for updates.
- If you can’t access http://update.microsoft.com/microsoftupdate, go to http://safety.live.com and scan your system.
- If you can’t go to http://safety.live.com, contact support at 1-866-PCSafety or 1-866-727-2338. This phone number is for virus and other security-related support. It is available 24 hours a day for the U.S. and Canada. For support in other countries, visit the Worldwide computer security information page.
Back to Top
What does the Conficker worm do?
To date, security researchers have discovered the following variants of the worm in the wild.
- Win32/Conficker.A was reported to Microsoft on November 21, 2008.
- Win32/Conficker.B was reported to Microsoft on December 29, 2008.
- Win32/Conficker.C was reported to Microsoft on February 20, 2009.
- Win32/Conficker.D was reported to Microsoft on March 4, 2009.
- Win32/Conficker.E was reported to Microsoft on April 8, 2009.
Win32/Conficker.B might spread through file sharing and via removable drives, such as USB drives (also known as thumb drives). The worm adds a file to the removable drive so that when the drive is used, the AutoPlay dialog box will show one additional option.
The Conficker worm can also disable important services on your computer.
In the screenshot of the Autoplay dialog box below, the option Open folder to view files — Publisher not specified was added by the worm. The highlighted option — Open folder to view files — using Windows Explorer is the option that Windows provides and the option you should use.
If you select the first option, the worm executes and can begin to spread itself to other computers.
The option Open folder to view files — Publisher not specified was added by the worm.
Back to Top
How does the Conficker worm work?
Here’s an illustration of how the Conficker worm works.
Back to Top
How do I remove the Conficker worm?
If your computer is infected with the Conficker worm, you may be unable to download certain security products, such as the Microsoft Malicious Software Removal Tool or you may be unable to access certain Web sites, such as Microsoft Update. If you can’t access those tools, try using the Windows Live safety scanner.
Back to Top
Where can I find more technical information about the Conficker worm and how can I stay up to date on the Conficker worm?
- For additional information, see Centralized Information About the Conficker Worm.
- For more technical information about the Conficker worm, see the Microsoft Malware Protection Center Virus Encyclopedia.
- Bookmark the Microsoft Malware Protection Center portal and the Microsoft Malware Protection Center blog for updated information.
- For symptoms and detailed information about how to remove the Conficker worm, see Help and Support: Virus alert about the Conficker Worm.
- To continue to get updated information on security, sign up for the Microsoft Security for Home Computer Users newsletter.
For more information, see How to prevent computer worms and How to remove computer worms.
Incoming search terms for the article:
Similar articles
- Malicious Software Removal Tool
Malicious Software Removal Tool Published: January 11, 2005 | Updated: June 9, 2009 Skip the details and download the tool The Microsoft Windows Malicious Software Removal Tool checks computers running Windows Vista, Windows XP, Windows 2000, and Windows Server 2003 for infections by specific, prevalent malicious software—including Blaster, Sasser, and Mydoom—and helps remove any
... - Malicious Software Removal Tool
Malicious Software Removal Tool Skip the details and download the tool The Microsoft Windows Malicious Software Removal Tool checks computers running Windows 7, Windows Vista, Windows XP, Windows 2000, and Windows Server 2003 for infections by specific, prevalent malicious software—including Blaster, Sasser, and Mydoom—and helps remove any infection found. When the detection and removal
... - Top 10 Tips to Keep Your Computer Virus
10. Use common sense. It’s always better to err on the side of safety. If you’re unsure about an attachment, delete it. Especially if it’s from a source you don’t recognize. If there are tempting animations on a site that look highly unprofessional, don’t download them. 9. Scan files for viruses before using
... - List of computer viruses
From Wikipedia, the free encyclopedia To aid the fight against computer viruses and other types of malicious software, many security advisory organizations and developers of anti-virus software compile and publish lists of viruses. The compilation of a unified list of viruses is made difficult because of naming. When a new virus appears, the rush begins
... - New laptop too slow? optimize it for free
With laptops becoming affordable more people are purchasing these low priced gems for their homes. But once they get their new jewel home they are often frustrated with its performance. Then the obligatory call to tech support is made by an angry consumer trying to figure out why there new laptop is slower than the
...