Share via

Checking if you Conficker

  • Article

Hello Again,

I got a really good tip from a Colleague Richard Diver the other day which helps verify whether a customer had the conficker virus. This was a tip passed on to him by Lesley Kipling a Senior Support Engineer within Microsoft Security team in the U.K.

Top Tip

To prevent panicking your customer when they might have a Conficker infection, keep this snippet handy to check for sure:

1. In Registry Editor, locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost
2. In the details pane, right-click the netsvcs entry, and then click Modify.
If the computer is infected with the Win32/Conficker virus, a random service name will be listed.

If you think you have it this website has some excellent information and guidance

https://www.microsoft.com/security/worms/conficker.aspx

Plus also visit this website for more generic information

https://www.dhs.gov/ynews/releases/pr_1238443907751.shtm

Jane