Hello
Not sure if anyone can help with this, I'm quite stumped by this and googling around hasn't yielded a solution!
We got struck by conficker, managed to get most of it cleaned up, servers are all patched and protected and the majority of the desktops are clean.
Since then, quite a few pcs have been running up to 50+ instances of the rundll32 process slowing the machines down.
Rebooting machines seems to wipe the slate clean, the pc boots up without all the processes in task manager, but they slowly reappear bogging the machine down again.
I've ran the sophos virus scanner and symatecs standalone conficker scanner, both returned clean, windows defender, spybot, adaware, clean!
We have found whats causing them to run, 1000+ scheduled tasks, starting with 'At', then a number after the 'At'.
Anyone ever seen anything like this? Any help would be appreciated with glowing praise and cookies! You will also save me from tearing my hair out and smashing my fist through every pc in the school!
Thanks!
Seb