>>>HI
>>>
>>>the client I am working at is currently having problems with Smart Fortress 2012 anmd seem to be having problem with its containment.
>>>
>>>Anyone got any experience of removal/prevention of this.
>>>
>>>
>>>I'm googling it anyway so only direct experience would be appreciated.
>>
>>I removed it from an XP box at one client using ComboFix: http://www.bleepingcomputer.com/download/anti-virus/combofix . Use only the one from bleepingcomputer.com, others may be malware.
>>
>>I recommend burning it to a CD and running it from that.
>>
>>Combofix requires an Internet connection to download its updates, and also to install the Windows Recovery Console if not already installed. However, after those are done you can disconnect the infected computer from the LAN/Internet.
>>
>>Most modern malware will attack other computers on a LAN to try to infect them. Disconnect or switch off any infected machines until you're ready to clean them.
>
>Thanks Al
>
>Any thoughts on prevention. I thought the people here had that sort of thing covered but maybe not.

Hopefully the victim didn't click on a link in an e-mail they received. That sort of thing requires user education.

A lot of malware currently is delivered via infected web pages. Visit the wrong page with a vulnerable browser or plug-in, you get infected.

Keep Java, Adobe Acrobat Reader and Adobe Flash up-to-date, malformed docs in those formats are common attack vectors. For malformed Javascript you can use the Firefox web browser with the NoScript add-on, either all the time or for visiting untrusted sites. NoScript blocks all active content by default and greatly reduces attack surface.