Welcome to remove-malware.net

How to remove Conficker B++ worm

Malware Description:
Conficker B++ is the latest mutation of the notorious Conficker worm that has been rapidly propagating throughout the planet and has contaminated millions of PCs worldwide. The new modification known as Conficker B++ has been designed to become an even more hazardous menace posing a serious threat to any operating system. One of the most evident characteristic features of Conficker B++ worm is the fact that it disables access to security sites and blocks the use of your antivirus software. Conficker B++ worm typically intrudes on its target systems imperceptibly by means of exploiting network vulnerabilities and security software flaws. Once inside, Conficker B++ will remain hidden and manifest itself only through the attendant symptoms. In addition to the above traits, Conficker B++ is also known to erase the previous system restore milestones, thus disabling the option to get your system back to the point when it was not yet infected. Probably the most threatening impact Conficker B++ may have on your system is the fact that it may record your keystrokes and transmits these data to remote attackers. If you want your PC security and your own privacy preserved, remove Conficker B++ once detected.

Malware Type: Worms

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Conficker B++ Worm Free Scanner and Remover: Download Now

How to remove Conficker B++ worm manually:
Manual removal of Conficker B++ worm is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• %System%\[Random].tmp
• %Temp%\[Random].tmp

The registry entries that need to be removed are as follows:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHO WALLCheckedValue = dword:00000000
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost, netsvcs = %Previous data% and %Random%
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
  DisplayName = %ServiceName%
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random]\Parameters
  ServiceDll = %MalwarePath%
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\”ServiceDll” = “Path to worm”
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\”ImagePath” = %SystemRoot%\system32\svchost.exe -k netsvcs
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
  “TcpNumConnections” = dword:0×00FFFFFE

Please, be aware that manual removal of Conficker B++ is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Conficker B++ worm, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove Downadup (Conficker) worm
How to remove W32.Downadup.B worm
How to remove Iksmas worm
How to remove Worm.Win32.Passma