First make sure you are infected with W32.Downadup.B/Conficker. The biggest sign is going into My Computer and double clicking your hard drive. If you get an error message about “RECYCLER\S” then you are infected.

Be on the lookout for the “RECYCLER” folder as W32.Downadup.B/Conficker puts this on any drive on your computer. It is launched when autorun runs and is responsible for installing the infection. If your computer is infected with W32.Downadup.B/Conficker, you cant remove the RECYCLER folder as it is just put straight back on. RECYCLER is in the main directory “[YourDriveLetter]:\RECYCLER” so it is easy to find.

There are alot of sites out there showing you how to manually remove W32.Downadup.B/Conficker. Most of these files have the word [Random] in it meaning it could be anything. Don’t bother trying to manually remove it, it’s time consuming and you could do more harm than good.

To get rid of W32.Downadup.B/Conficker you have to use an antivirus/anti-spyware program, I just don’t see any other way around it. Microsoft recommends using their Malicious Software Removal tool. If you can’t access that link, it’s because W32.Downadup.B/Conficker is blocking it. Even if you were able to download it, W32.Downadup.B/Conficker stops the Malicious Software Removal tool from being executed.

I did have some limited success using Microsoft’s Conficker manual removal instructions.. Surprisingly W32.Downadup.B/Conficker allowed me to view the page however it didn’t allow me to download or even install the patches.

Although I used Spyware Doctor to remove W32.Downadup.B/Conficker, this post applies to all antivirus/anti-spyware programs. Even if you are able to download and purchase an antivirus/anti-spyware program, it is next to useless as Conficker will prevent it from downloading the necessary updates. Beceause of this, get whatever antivirus/anti-spyware program you want from an uninfected friends computer. When you have the program, manually download the updates from a website. Most antivirus/anti-spyware programs allow you to do this.

Now BURN THE ANTIVIRUS/ANTI-SPYWARE TO A CD. I cannot stress this enough. DO NOT USE A PENDRIVE/USB DEVICE. It will be infected as soon as you plug it into your computer. This is how I was infected in the first place.

Once on a CD/DVD, install the program onto your computer, put in your registation details and install the manual updates you downloaded. Now let it do a full scan and say goodbye to W32.Downadup.B/Conficker.

After you have removed W32.Downadup.B/Conficker, be sure to install this Microsoft patch. It prevents hackers from taking over your system using W32.Downadup.B/Conficker. Those of you are uninfected will want to install it anyway for safety.

Good luck.

UPDATE: Conficker B++ & Conficker C has recently been released. This is just Conficker that has been modified with different ways to communicate with hackers. It’s impact on your computer is the same as it’s twin brother. As before don’t bother trying to manually remove it but use Spyware Doctor to remove Conficker B++ and Conficker C instead.

Conficker is scheduled to start doing something on April 1st. No one is exactly sure what it will do the general consensus is that it will connect to a server and get further instructions like download a Trojan.