Annoying Virus (confick-E)
I appear to have picked up the W32/Confick-E virus. Not entirely sure where from as the servers were all bang up to date with Windows Updates and Sophos Anti-Virus.
The Sophos website says to install the MS08-067 hotfix from Microsoft (which when I've checked was actually installed on my machines last year.) It then says to use Sophos to clean the virus.
Now I've tried doing this, I do a full Sophos scan, it picks the virus up, I perform a clean and it says clean successful. At this point a few services (such as the server service) are turned off (presumably to allow a proper clean) so I have to reboot. Upon reboot I run another scan and the virus is still there.
Is it possible that some of my desktop machines have the virus and are transmitting it back to the server when the server reboots and reconnects to the network?
If this is the case it looks like I may have to go round every PC and ensure they're all up to date with Updates and do a virus scan on them all.
Has anyone any experiences with this virus or have any suggestions?