A worm is a computer malware that spreads itself through computer networks ,USB disks and other storage mediums . Indication and details Conficker worm was given by Microsoft in last October .Since then  Conficker had different modifications and new versions .

As per per the rumours from security labs and blogs , about 10 million computers are already infected with variants of Conficker worm . And the worm would outburst in April 1st of this year to perform unknown destructive actions.We already have a post to remove Autorun worms affecting Windows autorun command . Unfortunately, this will not work with  Conficker worm .Conficker worm is known in different names with different antivirus  vendors and all of them have released  conficker removal tools . Download few conficker removal tools here .

Though their are some conficker removal tools , none of security experts are sure about their effectiveness with latest variants .

One’s infected, Conficker worm would display the following symptoms .

Disable error reporting and Windows updates .
Disable access to antivirus websites .
Perform  some actions similar to Autorun worm .
Network congestion issues .
Disables security softwares .

Conficker worm would also collect personal informations including user details/bank passwords and send them to botnets and attack websites associatedwith the code .

Conficker worm execution at April 1st might turn into another April fool joke . But as per advice from Microsoft ,Kaspersky ,Eset ,Symantec and other Antivirus vendors , the worm Conficker exists . So be prepared with  conficker worm removal tools to make make your computer secure against any future attacks .

Download Conficker worm removal tool from Microsoft .
Download Conficker worm removal tool from Eset (NOD 32).
Download Kido (Conficker) killer from Kaspersky lab .
DownloadDownadup(conficker) removal tool removal tool from F-secure .

Keep your Antivirus software updated . All antivirus vendors are daily releasing updates to detect and cure new variants of the Conficker worm .

Autorun.inf is a text file which instruct Windows about the execution priority when an operation is performed . Autorun command is associated with CDs ,DVDs, USB etc. If autorun.inf  is specified in a CD or DVD , Windows then reads and follows the specific instructions this file defines.
Autorun virus (Actually its a worm) manipulates the autorun.inf files . Autorun worm is capable of spreading through computer networks and USB disks . It will either replace or modify the existing settings in these devices . It is very difficult to remove autorun virus as it modifies many of the system settings . It will block access to internet , disable show hidden files and folders , blocks access to antivirus websites , disable msconfig etc .Formatting Windows will not work for the effective removal of autorun virus as the infection still exists in other hard disk partitions .

Autorun virus : Symptoms of infection

Hard disk autoplay
msconfig  disabled
Hidden files and folders disabled .

Remove Autorun virus

1.Get autorun virus removal tool here


2.Now Press Win+R and enter cmd open Windows command prompt .
Now we are about to list hard disk files from command prompt .
for C drive type dir c: /a/w

If Autorun virus is present , It will get listed as shown above . There would be many other files like onlinegames , kavo.exe,.vbs , Heap41a , newfolder.exe,.com, ppt.exe etc .

These files include read only, archive, system and hidden file attributes associated with them.
So in next step we will remove these restrictions from the above suspicious files .
attrib -s -h -r c:autorun.inf
or attrib -s -h -r c:autorun.vbs ( Change the hard disk partitions as required)

Now remove all those files associated with autorun virus using del instruction .

Del autorun.inf or Del kavo.exe ( repeat the procedure for all the files and hard drives )

Or you can automate the process by notepad

 dir c: /a/wattrib -s -h -r c:autorun.infdel autorun.inf

dir d: /a/wattrib -s -h -r d:autorun.infdel autorun.inf

dir e: /a/wattrib -s -h -r d:autorun.infdel autorun.inf

(Add the necessary hard disk partitions and files as per requirement ). Now copy the completed document in notepad and save as remove.bat . This file will remove all the autorun virus traces on execution .

After removing all the infected autorun virus files from hard drives , execute autorun virus removal tool on step 1 to remove further traces .

3. Repair registry to enable hidden files and folders .
Press Win+R and enter regedit . Now this will open the Windows registry . Move on to the following registration entries .

HKEY_LOCAL_MACHINE >SOFTWARE>Microsoft>Windows>CurrentVersion>Explorer>Advanced>Folder>Hidden>SHOWALL

Autorun virus usually alter this registration entry . Double click on CheckedValue and enter value data as 1 .  Now you would be able to enable hidden files and folders .


4. Turn off autorun feature in Windows .
This will avoid the execution of existing autorun worms in a PC and also one on USBs and CDs .
Copy the following command in notepad and save as removeautorun.reg

REGEDIT5[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionIniFileMappingAutorun.inf]@=”@SYS:DoesNotExist”

5. Restart your PC for the complete removal of Autorun virus .


Now almost all antivirus softwares like Kaspersky , Norton , NOD32 will remove autorun virus species. So keep your antivirus updated .