I need a solution
Windows XP SP3
SEP 12.1.2 (definitions date 30 may 2013) with all security options (except for NTP because of no reboot performed since installation) enabled; AutoProtect enabled for all files.
The machine had a strange behaviour. The suspect was that it was infected by Conficker.
The hard disk has been connected to another machine (same SEP version) and manually scanned. The result? W32.Downadup.B detected and removed.
The real question is: how is it possible that an updated version of SEP (appereantly working) did not detect it?
I'm confused.
How could I check that the SEP on the machine was "really" doing its work?