In addition to its own download updates, downloads and other Conficker two files on infected computers. One of them is a fake antivirus program, as detected FraudTool.Win32.SpywareProtect2009.s and is distributed using sites in Ukraine.