Nice website - good resources
Now my question :
After running deep scans in the library, I saw how long they took because of
the thousands of files stored locally w/in each user's profile. Is there a
utility or perhaps group policy which will force these temporary Internet
files to be deleted ? I considered for a few nanoseconds of doing the
cleanup myself, but then I thought again !
Bill Clark
Austine School


From: School Information Technology Discussion
[mailto:[log in to unmask]] On Behalf Of Eric Snay
Sent: April 24, 2009 4:49 PM
To: [log in to unmask]
Subject: Re: conflicker ~ I caught it

Hey BJ -
My heart goes out to you; hope you're able to get everything cleaned up.
We're running Trend Officescan here as well, and so far (knock on wood) I
haven't seen it.  Have you had a chance to invoke Trend's "outbreak
Keep us posted on your progress,
Eric I Snay
Technology Coordinator
Fair Haven Union High School
Fair Haven VT  05743
t: 802.265.4966  f: 802.265.3602

On 4/24/2009 at 4:05 PM, Bjorn Behrendt <[log in to unmask]> wrote:

It seems to proprogate itself any means possible, I am guessing the network
in my case.  Probably started from an infected usb key or email. 

I have Trend Microsystems which was up to date on most computers, but it
didn't seem to help much beond reporting.   I also ran the network checks
before March 31 and my network came back clear. 

I first noticed it when my main domain server was so taxed it stopped doing
anything.  This server is also my AV server so I am guessing that once it
sent out it's latest update, all 200 of the computers connected to it
reported back saying exsessive vireses detected. 

I had to go old school to get rid of it.   I dissconected all my switches
and have been one by one checking and patching the computers with a usb disk
(using kk.exe and the 3 ms patches).   I created a blog post on with links to the utilities I have been using. 

Bjorn Behrendt 
Proctor School District 
[log in to unmask] 

Bjorn Behrendt
Proctor School District
[log in to unmask]

----- Original Message ----- 
From: "Rick Hege" <[log in to unmask]> 
To: [log in to unmask] 
Sent: Friday, April 24, 2009 2:25:51 PM GMT -05:00 US/Canada Eastern 
Subject: Re: conflicker ~ I caught it 

Can you elaborate a bit on the problems that you are experiencing? 

At 01:40 PM 4/24/2009, you wrote: 
>22 days late but it is hear now.   
>Bjorn Behrendt 
>Proctor School District 
>[log in to unmask] 

Tech Support 
Townshend School District 
PO Box 226 
Townshend, VT 05353-0226 
Fax 802-365-7955