Conficker.C Description

Type: Worms

Conficker.C is a new variant of the Conficker worm and may be a greater threat than its predecessor. Conficker.C is expected to launch its attack on April 1st. The Conficker.C worm will disable the users' Windows Automatic Update, prevent the user access to the Windows Security Center, block DNS queries, delete all system restore points, as well as prevent the user access to security websites. The Conficker family of worms have been very dangerous and harmful to users' PC's. The new Conficker.C may prove to be even more damaging. It is essential at this point to keep all of your software updated in addition to verifying that your antivirus or antispyware applications are running with the latest definitions applied.

It is essential at this point to keep all of your software updated in addition to verifying that your antivirus or antispyware applications are running with the latest definitions applied.

Conficker.C is expected to contact various domains so it may obtain a set of instructions to carry out. Researchers have found the date of April 1st hard coded into Conficker.C as the date that these actions may take place. The domain generation algorithm has been slightly changed from previous versions of Conficker which makes Conficker.C much different. Below is a list of few of the domains that Conficker.C may contact on April 1st.


15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Fortinet W32/Conficker.FZ!
Ikarus Trojan.Win32.Genome
AhnLab-V3 Worm/Win32.Conficker
Sophos W32/Confick-F
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-PKR.G
AntiVir Worm/Conficker.Z.17
DrWeb Trojan.Click1.38217
F-Secure Worm:W32/Downadup.BR
Kaspersky Trojan.Win32.Genome.moke
Fortinet W32/Kido.IH!worm
AhnLab-V3 Win32/Kido.worm.166503.B
AntiVir Worm/Conficker.Z.58
DrWeb Trojan.Click2.12841
Kaspersky Trojan.Win32.Genome.hkck
McAfee Artemis!A312C8B1ADB4

Technical Information

Screenshots & Other Imagery

SpyHunter Detects & Remove Conficker.C

File System Details

Conficker.C creates the following file(s):
# File Name MD5 Detection Count
1 poutm.nwb 04199a5b981fd5a3d846d3f9d4c1d574 265
2 4027631.driveupload 93d305c9094278e3e6da70e40b543c28 24
3 JWGKVSQ.VMX.Muestra EliStartPage v20.48.vir 393e2e61ff08a8f7439e3d2cfcb8056f 13
4 pjjcxft.dll ae7709bd2b77d2f40aa8f37c1126d8b1 12
5 sgrxa.dll 9c09418c738e265a27e6c599f43d86ab 11
6 dzzprkg.dll 67241ac88d798ccd90a6f49f481ac26c 9
7 jwgkvsq.vmx d987a9af709bfd188071aa3f5e027aac 6
8 crnnxau.dll 76cfe416f735588146aaa3b4f8d0907a 5
9 dohtu.dll d2eabe15257a453416efa18992d1edbd 4
10 lmmtvk.dll 84ef65fbf6e58fc735e867031bbb8d02 4
11 lccyr.dll 95ad430abca3da496600f764c120683c 4
12 khgixdc.dll b081022fc581decf4c8640dbc74a9198 3
13 lvxan.dll 59fe65fad4849c95ed538475c1f707cf 3
14 hzcakuc.dll.78034401.mwt 9645f61e0913a58a29ecfcce940136fe 2
15 jyuzfa.dll fb7ba7e14bafdc97724ffb66d39c2246 2
16 njyqxzt.dll 023bc7137676d46c114483b11853131e 2
More files

Related Posts

Site Disclaimer is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.