[sdikevin]

I have a remote customer that seems to have his network infected with conficker. I am waiting for him to respone with his OS, make and model of pc and any anti-virus programs he has installed on this pc. If anyone here has exp. with the removal of conficker share your knowledge.

[SandyGunfox]

A flash drive my university gave me had conficker on it. My anti-virus programs caught it but it sure scared the hell out of me!

Most major anti-virus programs today will detect it, I'm pretty sure; I had the best luck with Avira AntiVir. If they have a problem on multiple computers or aren't sure which are and aren't infected, this site will allow you to see which computers are infected faster than scanning all of them.

Of course, tell him to consider any removable media unsafe until he can securely test it.

All that said, conficker is fought like most viruses are; basic virus-fighting techniques work just fine against it in my experience. Good luck!

[sdikevin]

I really don't get how this person got it on his network if he had any anti-virus running. I'm still waiting for a response, to know for sure what if any AV is on his PC. I was able to track down the main PC that was infected with the firewall logs.... one pc blasting out over 6000 connections all on the same port (445) raises a red flag. The customer confirmed that he knew that it was infected, and I had him to disconnect that PC from his network asap to stop the spread.

[SandyGunfox]

You had a customer knowingly keep an infected computer on your network? Ouch.

Updating or downloading anti-virus software or updates might be difficult. Using a clean computer to install anti-virus software on a portable hard disk works just fine, though.

[sdikevin]

it is not on our network, we just manage their firewall for them. It is a small business network for a church and thats about all that I know right now. I"m still waiting for a reply from the customer.