How to remove Conficker C worm manually: Manual removal of Conficker C worm is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries. The files to be deleted are listed below: %Windows%\System32\[Random].dll %Program Files%\Internet Explorer\[Random].dll %Program Files%\Movie Maker\[Random].dll The registry entries that need to be removed are as follows: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Fol der\Hidden\SHO WALLCheckedValue = dword:00000000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost, netsvcs = %Previous data% and %Random% HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ DisplayName = %ServiceName% HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random]\Parameters ServiceDll = %MalwarePath% HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\�ServiceD ll� = �Path to worm� HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\�ImagePath� = %SystemRoot%\system32\svchost.exe -k netsvcs HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters �TcpNumConnections� = dword:0�00FFFFFE