When an Active Directory account keeps locking out or there is a significant increase in authentication
requests on domain controllers, it can be a sign of the
Conficker virus
(also known as Downup, Downadup or Kido), which performs brute-force attacks against accounts in a
network.
Netwrix Account Lockout Examiner helps IT administrators identify Conficker in the early stages by
enabling them to detect a
user account that keeps locking out of Active Directory and then quickly unlock all accounts affected by
the virus.