Especially with the server also infected how will you be sure that all
infections are totally removed without also reformatting the server and
reinstalling SBS?

"eggedd2k" wrote in message
...
thanks for your response on this.

Yes the server is infected.

Having thought this through it's clear that by doing one system at a
time there is a risk of reinfection when the cleaned workstation is
joined back into the network.

The Microsoft link you posted is of great help and this is clearly the
path to go down:

1. Stop Conficker from spreading via group policy.
2. Clean each system with AV/Malwarebytes/Malicious Software Removal
tool

thanks again for your help on this!