Nice website - good resources
Now my question :
After running deep scans in the library, I saw how long they took because of the thousands of files stored locally w/in each user's profile. Is there a utility or perhaps group policy which will force these temporary Internet files to be deleted ? I considered for a few nanoseconds of doing the cleanup myself, but then I thought again !
Bill Clark
Austine School

From: School Information Technology Discussion [mailto:[log in to unmask]] On Behalf Of Eric Snay
Sent: April 24, 2009 4:49 PM
To: [log in to unmask]
Subject: Re: conflicker ~ I caught it

Hey BJ -
My heart goes out to you; hope you're able to get everything cleaned up.  We're running Trend Officescan here as well, and so far (knock on wood) I haven't seen it.  Have you had a chance to invoke Trend's "outbreak control"?
Keep us posted on your progress,
Eric I Snay
Technology Coordinator
Fair Haven Union High School
Fair Haven VT  05743
t: 802.265.4966  f: 802.265.3602

On 4/24/2009 at 4:05 PM, Bjorn Behrendt <[log in to unmask]> wrote:
It seems to proprogate itself any means possible, I am guessing the network in my case.  Probably started from an infected usb key or email.

I have Trend Microsystems which was up to date on most computers, but it didn't seem to help much beond reporting.   I also ran the network checks before March 31 and my network came back clear.

I first noticed it when my main domain server was so taxed it stopped doing anything.  This server is also my AV server so I am guessing that once it sent out it's latest update, all 200 of the computers connected to it reported back saying exsessive vireses detected.

I had to go old school to get rid of it.   I dissconected all my switches and have been one by one checking and patching the computers with a usb disk (using kk.exe and the 3 ms patches).   I created a blog post on with links to the utilities I have been using.

Bjorn Behrendt
Proctor School District
[log in to unmask]

Bjorn Behrendt
Proctor School District
[log in to unmask]

----- Original Message -----
From: "Rick Hege" <[log in to unmask]>
To: [log in to unmask]
Sent: Friday, April 24, 2009 2:25:51 PM GMT -05:00 US/Canada Eastern
Subject: Re: conflicker ~ I caught it

Can you elaborate a bit on the problems that you are experiencing?

At 01:40 PM 4/24/2009, you wrote:
>22 days late but it is hear now.
>Bjorn Behrendt
>Proctor School District
>[log in to unmask]

Tech Support
Townshend School District
PO Box 226
Townshend, VT 05353-0226
Fax 802-365-7955