how to remove confiker virus

Here is the link to Microsoft's page where you can download the patch to stop it happening again - once clean!

http://www.microsoft.com/technet/security/bulletin/ms08-067.mspx

You could also run the Microsoft Malicious Software Removal tool...

http://www.microsoft.com/security/malwareremove/default.aspx

And then patch you system with the following update...

http://www.microsoft.com/security/worms/conficker.aspx

Harkins

we have applied the patch using our WSUS server onto all our machines, we are looking for something more in depth

any suggestions?

What do you mean by "more in depth"?

If you are using WSUS you can roll out the Malicious Software Removal Tool via WSUS, and then follow that up with the patch. The issue will be then be resolved.

We have successfully used this method to protect our entire network!

by more in depth i meant - looking at server logs to suggest certain attacks etc and perhaps entrys in the resitry of a machine to suggest its infected.

Forefront should pick up the conficker as it does sometimes, Windows updates is turning into a nightmare with conficker stopping the service...

thanks for your help so far, keep the suggestions coming!!

so can everyone else confirm they have succesfully removed it from their network??

thanks

Have you looked at the Sophos tool I suggested in my initial post?

yes we have used that one and the symantec one and the bit defender option as well!!

thats the frustration, even with the patch machines are getting it...

thanks for your suggestions

I'd be a little concerned if machines that have been patched are getting it. Are these machines getting after they were patched or were they already infected before they were patched?

I guess a bit of both! i can see forefront stopping the virus when it comes through.. but i swear on some machines forefront isnt picking it up!

All machiens should now be patched, we are decomissioning all our Win 2000 machines because they seem to be the most vulnerable!

thanks

Hi,

Install the patch from microsoft 'WindowsXP-KB958644-x86-ENU.exe' and run Microsoft Windows Malicious Software Removal Tool windows-kb890830-v2.12.exe it should work fine the patch 'WindowsXP-KB958644-x86-ENU.exe'  is to prevent conflicker virus

anil_kumar137 - I honestly don't thing that is a proper use of the McAfee SDAT file. Those are provided for licensed installations of one of their products.

Thomas_Wray,
I'm puzzled that the specfic advice first offered (using stand-alone conficker removers) has not worked - unless I am misunderstanding you.

I have used MS MSRT for successful removal on a couple of cases this year. This link may already have been provided above, but worth reviewing to make sure you have taken all of the appropriate steps: http://support.microsoft.com/kb/962007

Thomas_Wray,
Welcome to EE - I see that you are a brand new Member.

Although I appreciate your quick closure of this question, I think that my comments were not much more than a recap of what alanhardisty and Harkins had already posted - with maybe a little additional information.

I'd also like to point out (again) that I think the recommendation from anil_kumar137 is an improper use of a proprietary (McAfee) application.

I am going to ask the Moderators and Zone Advisors to review the comments made here and let them make a recommendation about how this question should have been closed.

I am really sorry, i am not sure of using DAT file involves risk of license and i have posted for around 3 questions to use DAT file.... This will not hapen again from my end.

Regards
Anil