Conficker first disables system services like Windows Automatic Update, Windows Error Reporting, etc. and then connects to a web server from where it downloads additional malware onto the victim’s computer. The worm also attaches itself to certain Windows processes such as svchost.exe, explorer.exe and services.exe.