puzzling conficker worm issue
Hello,
I have several windows 2003 svc pack 2 systems with latest patches including ms08-067. I tried running symantec D.exe, MS malicious tool and ran scan from MS online. Conficker is not detected at all, but I keep getting the AT1, AT2,,,,, jobs droped into
my scheduler which results in many runddl32.exe processes. If Conficker is not on systems, how do you suppose this is happening?
tx in advance!
Jack
May 24th, 2012 10:43am
Hi,
I ran the Sophos tool and it came back clean and did apply the 958644 patch and ran the MS security scanner with no virus found. did not apply all steps in 962007 yet, as checking that it wont present issues in the environment first.
1 - SEP still catching/deleting downadup.b
2 - Same exact time as 1, there is a new task inserted into scheduled tasks.
Plx let me know if other thougths on this.
tx
Free Windows Admin Tool Kit Click here and download it now
June 8th, 2012 12:18pm
Try suggestions from following articles
Stop Conficker from spreading by using Group Policy
http://www.symantec.com/connect/articles/stop-conficker-spreading-using-group-policy
Prevent Conficker/Downadup From Bothering You
http://savemybutt.com/prevent-confickerdownadup-bothering/Press any key... What the ... Where's any key ?
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
About Me ?
June 8th, 2012 12:38pm