Question : Conflicker Worm Removed but Still account lockout

Hi Guru's
We had the confliker worm ..and managed to remove it and install Mcafeee and Windows patches as mentioned. Now we have a strange problem, now and then a computer shows up in the Event viewer with ID 644 and the computer name is not part of our network nor pingable.

This computer keeps locking users from AD and causes grief to us. How is this possible?...and how can we identify the source of this computer...?

Please help...b/c this is causing us downtime.....

Thanks

Answer : Conflicker Worm Removed but Still account lockout

Yes, true. 550 is a large number but to remove worm, you have to go through this pain. There may be some other tricks, I need to search for it though. I had this problem and I spent 3 sleepless nights to resolve this. Fortunately I had only 60 machines and some 20 Laptops.