Hi,<br><br>In my company we use Forefront Client as the main anti-virus/anti-malware tool for our windows xp clients.<br><br>Unfortunately, some of these clients got infected by the Antivirus XP 2008 spy/malware even though they had the Forefront client installed and updated.<br><br>Does anyone else have this problem that Forefront does not protect the client from being infected by this specific virus or are we doing something wrong in our security policy?<br><br>Regards,<br><br>Mark© 2009 Microsoft Corporation. All rights reserved.Thu, 19 Mar 2009 21:30:59 Z2271732d-17fa-4163-af4e-01c425f4cd50http://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/2271732d-17fa-4163-af4e-01c425f4cd50#2271732d-17fa-4163-af4e-01c425f4cd50http://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/2271732d-17fa-4163-af4e-01c425f4cd50#2271732d-17fa-4163-af4e-01c425f4cd50Mark Blomhttp://social.technet.microsoft.com/Profile/en-US/?user=Mark%20Blom Hi,<br><br>In my company we use Forefront Client as the main anti-virus/anti-malware tool for our windows xp clients.<br><br>Unfortunately, some of these clients got infected by the Antivirus XP 2008 spy/malware even though they had the Forefront client installed and updated.<br><br>Does anyone else have this problem that Forefront does not protect the client from being infected by this specific virus or are we doing something wrong in our security policy?<br><br>Regards,<br><br>MarkWed, 08 Oct 2008 06:24:27 Z2008-10-08T06:24:27Zhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/2271732d-17fa-4163-af4e-01c425f4cd50#7822077f-6a1d-4d39-97b6-675d60fc4ed7http://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/2271732d-17fa-4163-af4e-01c425f4cd50#7822077f-6a1d-4d39-97b6-675d60fc4ed7Johan Blom, Forefront MVPhttp://social.technet.microsoft.com/Profile/en-US/?user=Johan%20Blom%2c%20Forefront%20MVP Call microsoft support and tell them. They will help you right away. This could be an alterd/custom version of the malware which no antimalware would have detected.<br>Have you executed a full scan on these computers?<br><br>If you have a sample of the malware you can also submit it ta their portal:<br><a href="https://www.microsoft.com/security/portal/submit.aspx">https://www.microsoft.com/security/portal/submit.aspx</a><br><br>/johan<br><hr size="1" align="left" width="25%">Forefront MVP, MCSE | www.msforefront.comWed, 08 Oct 2008 14:48:07 Z2008-10-08T14:48:07Zhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/2271732d-17fa-4163-af4e-01c425f4cd50#8f046b94-a0f4-4d26-9a4a-b9d5984cff76http://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/2271732d-17fa-4163-af4e-01c425f4cd50#8f046b94-a0f4-4d26-9a4a-b9d5984cff76Huerhttp://social.technet.microsoft.com/Profile/en-US/?user=Huer I've noticed that only a few antivirus suites will catch Vundo, which is what xp av2008 is, that and many other rogue antiviruses.  Malwarebytes catches it, but what really does a good job at killing Vundo and av360 is Combofix.  How good is Forefront at killing these now?  And what about Gen.Zlob? I haven't found anything that really does a good job at killing Zlob yet.  Thu, 19 Mar 2009 21:30:56 Z2009-03-19T21:30:56Z