Sophos Conficker clean-up tool (standalone version)

The Sophos Conficker clean-up tool (standalone version) allows you to detect, isolate, and remove the Conficker virus from a single computer.

If you need to clean up Conficker infections across a network, use the Sophos Conficker Clean-up tool (network version)

Conficker is a virus that spreads through infected Windows shared folders and USB storage devices. A more detailed description can be found in the knowledgebase article Sophos Anti-Virus for Windows 2000+: removing W32/Confick and Mal/Conficker.

Operating systems affected
Windows 2000
Windows XP and Vista
Windows Server 2003 and 2008
 
Important  
If you are running Sophos Anti-Virus you do not need to disable HIPs while you're using the Sophos Conficker Cleanup Tool. Whilst this tool should not conflict with other anti-virus products, the nature of the tool means it may be blocked by behaviour-based (HIPS) functionality within non-Sophos anti-virus solutions.

What to do

Ideally the tool should be downloaded to a computer that is not infected by Conficker. You can then make a copy onto a CD or a DVD and use that on your infected computers. If all your computers are infected this may not be possible.

In order to run the tool you must be logged on to the computer that you want to clean as a user with full administrative rights.

1. Navigate to the following location on the Sophos website, https://secure.sophos.com/products/free-tools/conficker-removal-tool/download.
   
2. Download the tool, then double-click the file to run the installer. Follow the instructions on-screen to install and run the clean-up tool.
    
   NOTE: This tool may take several minutes to perform the scan and clean up routine.