I have AVAST on some computers on my network and Microsoft sec essentials on others.
On a daily basis all these PCs report that the Conficker worm has been detected and deleted.
is there anyway that it can be removed permanently?
windows XP is up to date. Firewalls are on and on one computer I have even disabled shares. How is this worm getting through? or is it SUFFICIENT that the AV programs are detecting and removing them.
Is there an additional step to MANUALLY delete it forever?
Hi
Malware thet you mentioning had stopped developing about a year ago. Every antivirus should remove it fully and successfully.
It should be enough just to do uptade/upgrade your antivirus.
Run this program just in case…
Download Malwarebytes’ Anti-Malware
Double-click to Run the installation. At the very beginning to verify that these options are ticked:
Select option Perform Quick Scan and click Scan .
Upon completion of the process click OK Show Results:
the list of detected malware to verify that the marked all the items and click Remove Selected.
Upon completion of cleaning attach MBAM log the forum.
If you want a thorough analysis of the system after the Malwarebytes program do the following:
Do you have file sharing on your internal network?
If yes, please make source that shared file has been cleaned and scanned with avast antivirus on your file server
Whether your often use removable media on your site to copy and paste file from outside environment?
If yes, please for each time you plug in to your system. I recommended you to scan first before your copy and paste the file which’s to avoid any malware installer copied in to your system
Please do a scan to avoid any missed file before you apply avast on your system
so even though Avast and MSE have reported that the PC is now clean. About 1 hour later it detects and cleans the worm again. So if all the computers on the network are clean how is the WORM propagating?
Do I still have to run the malware program - I get the feeling that after the Malware program cleans it - the worm will come back again.
All the removable drives I attach are scanned foirst by the AV program and are always reported as clean. so do you think it must be coming through a shared folder?