Like many others, my office network suffered from Conficker worm.
Initially we could not make out reason for slow network response, almost all windows client machines were slow & hanged frequently.
Installed Trend antivirus was unable to detect virus, even though it was updated with latest definition.
We have WSUS server configured & is scheduled to fetch updates. But it wasn’t worth as techies forgot to follow procedure to make relevant change to use WSUS. We have blocked Microsoft windows update site as we use WSUS. Our ignorance for critical updates caused us little more downtime.
While searching I found ConTest.exe tool to detect infected systems.
To remove virus I used S.T.I.N.G.E.R.exe (Used Windows safe mode to remove virus).
During R&D to find and remove virus, I noticed free AVAST antivirus, Symantec is able to detect & remove worm. I am sure almost all antivirus will be able to detect worm.
My suggestion, till the time you / your office network is stuck with Microsoft Windows, use WSUS or Windows update to keep your network safe from known venerability.
