Conflicker Worm Removed but Still account lockout
Posted on 2009-04-17
We had the confliker worm ..and managed to remove it and install Mcafeee and Windows patches as mentioned. Now we have a strange problem, now and then a computer shows up in the Event viewer with ID 644 and the computer name is not part of our network nor pingable.
This computer keeps locking users from AD and causes grief to us. How is this possible?...and how can we identify the source of this computer...?
Please help...b/c this is causing us downtime.....