Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Feb 25, 2009 | Updated Sep 15, 2017

Trojan:WinNT/Conficker.B

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

Trojan:WinNT/Conficker.B is a trojan component of Worm:Win32/Conficker that aids in restarting the TCP/IP service.
 
Microsoft strongly recommends that users apply the update referred to in  Security Bulletin MS08-067 immediately.
 
Microsoft also recommends that users ensure that their network passwords are strong to prevent this worm from spreading via weak administrator passwords. More information is available here.
 
Microsoft also recommends that users apply an update that changes the AutoPlay functionality in Windows to prevent this worm from spreading via USB drives. More information is available in the Microsoft Knowledgebase Article KB971029.
Microsoft strongly recommends that users apply the update referred to in  Security Bulletin MS08-067 immediately.
 
Microsoft also recommends that users ensure that their network passwords are strong to prevent this worm from spreading via weak administrator passwords. More information is available here.
 
Microsoft also recommends that users apply an update that changes the AutoPlay functionality in Windows to prevent this worm from spreading via USB drives. More information is available in the Microsoft Knowledgebase Article KB971029.
 
To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
 
Computers infected by this worm may be unable to connect to Web sites that provide scan and removal support, security product updates or general support. From a non-infected computer, users should view the following two articles provided in Microsoft Help and Support to assist in removal of Win32/Conficker:
 
http://support.microsoft.com/kb/962007 - Virus alert for Win32/Conficker.B and manual removal instructions
http://support.microsoft.com/kb/891716 - Deployment of MSRT in an enterprise environment
Follow us