Large Number Of Systems Infected With W32/Conficker

W32/Conficker !
Issue: If computer is infected with this worm, Customer may not experience any symptoms, or you may experience any of the following symptoms:

Account lockout policies are being tripped.
Automatic Updates, Background Intelligent Transfer Service (BITS), Windows Defender, and Error Reporting Services are disabled.
Domain controllers respond slowly to client requests.
The network is congested.
Various security-related Web sites cannot be accessed.

Solution: Run the Malicious Software Removal tool

You can download the MSRT from either of the following Microsoft Web sites:
http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
http://support.microsoft.com/kb/890830

Note: If customer is unable to go online to download MSRT then perform following sites after disabling ‘Disabling System Restore’:

http://support.microsoft.com/kb/890830

Note: If customer is unable to go online to download MSRT then perform following sites after disabling ‘Disabling System Restore’:

1. Go to Start > Search > All Files or Folders.
2. In the "All or part of the the file name" section, type in "Win32/Conficker.AA" file name(s).
3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
4. When Windows finishes the search, not the location of "Win32/Conficker.AA"
5. Then delete all the entries.
6. Launch command prompt, navigate to the location where “Win32/Conficker.AA” was found and unregister the files.
For Eg: C:\Virus-Foler\> regsvr32 /u Win32/Conficker.AA.dll <ENTER>

Once the file is removed completely either by MSRT or by manual method, please install latest Microsoft Security Bulletin & Virus Definitions:

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx


Refer: http://support.microsoft.com/kb/962007

http://www.microsoft.com/security/portal/Entry.aspx?name=Win32%2fConficker

Other Articles:

Refer: http://support.microsoft.com/kb/962007

http://www.microsoft.com/security/portal/Entry.aspx?name=Win32%2fConficker

Thanks dinesh for the heads up.

Your Welcome mansrm81.

Thanks for the info dinesh.