Hey BJ -
My heart goes out to you; hope you're able to get everything cleaned
up.  We're running Trend Officescan here as well, and so far (knock on
wood) I haven't seen it.  Have you had a chance to invoke Trend's
"outbreak control"?
Keep us posted on your progress,
Eric I Snay
Technology Coordinator
Fair Haven Union High School
Fair Haven VT  05743
t: 802.265.4966  f: 802.265.3602

>>> On 4/24/2009 at 4:05 PM, Bjorn Behrendt <[log in to unmask]> wrote:
It seems to proprogate itself any means possible, I am guessing the
network in my case.  Probably started from an infected usb key or email.

I have Trend Microsystems which was up to date on most computers, but
it didn't seem to help much beond reporting.   I also ran the network
checks before March 31 and my network came back clear. 

I first noticed it when my main domain server was so taxed it stopped
doing anything.  This server is also my AV server so I am guessing that
once it sent out it's latest update, all 200 of the computers connected
to it reported back saying exsessive vireses detected. 

I had to go old school to get rid of it.   I dissconected all my
switches and have been one by one checking and patching the computers
with a usb disk (using kk.exe and the 3 ms patches).   I created a blog
post on with links to the utilities I have been

Bjorn Behrendt 
Proctor School District 
[log in to unmask] 

Bjorn Behrendt
Proctor School District
[log in to unmask] 

----- Original Message ----- 
From: "Rick Hege" <[log in to unmask]> 
To: [log in to unmask] 
Sent: Friday, April 24, 2009 2:25:51 PM GMT -05:00 US/Canada Eastern 
Subject: Re: conflicker ~ I caught it 

Can you elaborate a bit on the problems that you are experiencing? 

At 01:40 PM 4/24/2009, you wrote: 
>22 days late but it is hear now.   
>Bjorn Behrendt 
>Proctor School District 
>[log in to unmask] 

Tech Support 
Townshend School District 
PO Box 226 
Townshend, VT 05353-0226 
Fax 802-365-7955