Vista - Large Number Of Systems Infected With W32/Conficker

**dinesh** · 01-20-2009

W32/Conficker !
Issue: If computer is infected with this worm, Customer may not experience any symptoms, or you may experience any of the following symptoms:

Account lockout policies are being tripped.
Automatic Updates, Background Intelligent Transfer Service (BITS), Windows Defender, and Error Reporting Services are disabled.
Domain controllers respond slowly to client requests.
The network is congested.
Various security-related Web sites cannot be accessed.

Solution: Run the Malicious Software Removal tool

You can download the MSRT from either of the following Microsoft Web sites:
http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
http://support.microsoft.com/kb/890830

Note: If customer is unable to go online to download MSRT then perform following sites after disabling ‘Disabling System Restore’:

http://support.microsoft.com/kb/890830

Note: If customer is unable to go online to download MSRT then perform following sites after disabling ‘Disabling System Restore’:

1. Go to Start > Search > All Files or Folders.
2. In the "All or part of the the file name" section, type in "Win32/Conficker.AA" file name(s).
3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
4. When Windows finishes the search, not the location of "Win32/Conficker.AA"
5. Then delete all the entries.
6. Launch command prompt, navigate to the location where “Win32/Conficker.AA” was found and unregister the files.
For Eg: C:\Virus-Foler\> regsvr32 /u Win32/Conficker.AA.dll <ENTER>

Once the file is removed completely either by MSRT or by manual method, please install latest Microsoft Security Bulletin & Virus Definitions:

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

Refer: http://support.microsoft.com/kb/962007

http://www.microsoft.com/security/portal/Entry.aspx?name=Win32%2fConficker

Other Articles:

Refer: http://support.microsoft.com/kb/962007

http://www.microsoft.com/security/portal/Entry.aspx?name=Win32%2fConficker

**mansrm81** · 01-20-2009

Thanks dinesh for the heads up.

**dinesh** · 01-20-2009

Your Welcome mansrm81.

**skylab2000** · 01-21-2009

Thanks for the info dinesh.

**dinesh** · 01-21-2009

Your Welcome skylab2000

01-20-2009	#1 (permalink)
dinesh Windows 7 RTM 64-bit 1,264 posts	Large Number Of Systems Infected With W32/Conficker W32/Conficker ! Issue: If computer is infected with this worm, Customer may not experience any symptoms, or you may experience any of the following symptoms: Account lockout policies are being tripped. Automatic Updates, Background Intelligent Transfer Service (BITS), Windows Defender, and Error Reporting Services are disabled. Domain controllers respond slowly to client requests. The network is congested. Various security-related Web sites cannot be accessed. Solution: Run the Malicious Software Removal tool You can download the MSRT from either of the following Microsoft Web sites: http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en http://support.microsoft.com/kb/890830 Note: If customer is unable to go online to download MSRT then perform following sites after disabling ‘Disabling System Restore’: http://support.microsoft.com/kb/890830 Note: If customer is unable to go online to download MSRT then perform following sites after disabling ‘Disabling System Restore’: 1. Go to Start > Search > All Files or Folders. 2. In the "All or part of the the file name" section, type in "Win32/Conficker.AA" file name(s). 3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button. 4. When Windows finishes the search, not the location of "Win32/Conficker.AA" 5. Then delete all the entries. 6. Launch command prompt, navigate to the location where “Win32/Conficker.AA” was found and unregister the files. For Eg: C:\Virus-Foler\> regsvr32 /u Win32/Conficker.AA.dll <ENTER> Once the file is removed completely either by MSRT or by manual method, please install latest Microsoft Security Bulletin & Virus Definitions: http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx Refer: http://support.microsoft.com/kb/962007 http://www.microsoft.com/security/portal/Entry.aspx?name=Win32%2fConficker *Other Articles:* Refer: http://support.microsoft.com/kb/962007 http://www.microsoft.com/security/portal/Entry.aspx?name=Win32%2fConficker
My System Specs

01-20-2009	#2 (permalink)
mansrm81 Vista Ultimate 64bit SP2/ 1,863 posts	Re: Large Number Of Systems Infected With W32/Conficker Thanks dinesh for the heads up.
My System Specs

01-20-2009	#3 (permalink)
dinesh Windows 7 RTM 64-bit 1,264 posts	Re: Large Number Of Systems Infected With W32/Conficker Your Welcome mansrm81.
My System Specs

01-21-2009	#4 (permalink)
skylab2000 vista home premium 64bit 45 posts	Re: Large Number Of Systems Infected With W32/Conficker Thanks for the info dinesh.
My System Specs

01-21-2009	#5 (permalink)
dinesh Windows 7 RTM 64-bit 1,264 posts	Re: Large Number Of Systems Infected With W32/Conficker Your Welcome skylab2000
My System Specs

Similar Threads
Thread	Forum
Copying or deleting a large number of files	Vista file management
How to force Outlook 2007 to allow a large number of "To's"	Microsoft Office
wmi fails after large number of calls	VB Script
Audio Service has large number of Memory Handles	Sound & Audio
Moving large number of files within same drive	Vista file management