Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 536 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Conficker

Millsy

Hi

We've had/got the conficker virus' on some of our PC on the network so I've ran sophos scans on them and then cleaned them up from quarantine. I've ran a second scan after that just to make sure it's clear and sure enough nothing is found.  However the on access scan box that appears in the bottom right of the screen still reports that its finding the virus. further sophos scans dont dretect anything though.

I have downloaded and ran the conficker free tool from the sophos site and ran that as well but that also fails to detect it.

How can i stop sophos from report this virus if it isn't their anymore.

Cheers for any help

:2847


This thread was automatically locked due to age.
  • 0

    Hello Millsy,

    please search the ESDP forum for Conficker or Confiker (oh this spelling woes) - you will find detailed information on this in the latest threads.

    Specifically to How can i stop sophos from report this virus if it isn't their anymore: You can't - if Sophos reports it, it has found it.  Use View anti-virus and HIPS log from the GUI to get the details for the detection and the action taken. Depending on your scan and cleanup settings the detected item might have been automatically cleaned up so you will find it neither in the quarantine nor with a subsequent scan. But the alert is correct.

    Most likely you have still one or more infected or unprotected machines on your network. Also USB sticks can carry conficker - just last week I showed a co-worker what his contained and cleaned it up. Not that it did any harm to his PC ("Protected by Sophos"). As we have a number of PCs where we only deny access it hasn't been cleaned up automatically - but even if you do and later re-insert the stick on a infected PC you go for another round.

    Christian

    :2863
Unfiltered HTML