Conficker.C manual removal:
Kill processes:
svchost.exe explorer.exe services.exe
Delete registry values:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\??ServiceDll?? = ??Path to worm??
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\??ImagePath?? = %SystemRoot%\system32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
??TcpNumConnections?? = dword:0?00FFFFFE
Unregister DLLs:comaddin32.dll [Random].dll
Delete files:[Random].tmp
Post Comment: