Forefront Client Security TechCenter >
Forefront Client Security Forums
>
Forefront Client Security Alerting and Monitoring
>
ForeFront removal reports
ForeFront removal reports
- We've been getting lots of emailed reports from ForeFront lately to do with conficker, the report says
Description: Client Security failed to eliminate the following threat:
- Threat name: Worm:Win32/Conficker.B!inf
- Attempted action: Remove
However when we visit the PC in its history it has successfully removed. One one occasion we found successfully removed but using the DART disc the virus was still there.
We're a bit sensitive about conficker here and any help on why the reports differ from the information on the client machine would be appreciated.
All Replies
- Any update here?
Mike Crowley A+, Network+, Security+, MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator
Do you still have Exchange 2000? Looking to upgrade to Exchange 2010? Read how. - When you take a look at the client what are the specific event ID's you seem to be getting around the time the detection occurred and the "supposed" failed removal?
CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde
