Seems I get Conficker.B but everything works. How to remove it definitively?
Posted on 2012-08-16
I know that there are many questions about Conficker already but I need your help anyway please.
Time ago I noticed on 2 server (2008 R2) that I got a strange task on "Task Scheduler" called "At1" (from Monday to Sunday at 7.00 am)...after a short search I realize I've got Conficker..
The anomaly is that we didn't noticed any issue with the network, windows update, on the services or in daily web use, as a matter of fact the servers are already patched with KB958644.
I run severals tools like malwarebytes, stinger, conficker removal tool and windows malicious removal tool (WMRT) that find "Win32/Conficker.B". Especially WMRT find and remove it (the task disappear) but when I restart the servers "At1" task in Task Scheduler come back.
I run WMRT throught a script on all the clients (about 40) and "SEEMS" they are clean..
So the question is: I can I remove it definitively??
many thanks in advance