Guest Bill Norton Posted July 8, 2008 Posted July 8, 2008 I have a server that got infected by the virus W32.Virut.B and was able to clean it from all the infected files except one. The file that I cannot clean is winmgnt.exe When I run Norton on it, it finds the virus but cannot clean or quaranteen the virus and leaves it alone. I've tried to run Norton in " Safe Mode " and also in " Safe Mode with Networking " but to no avail. Thanks, Bill url:http://www.ureader.com/gp/1338-1.aspx
Guest Pegasus \(MVP\) Posted July 8, 2008 Posted July 8, 2008 Re: Virus W32.Virut.B "Bill Norton" <bnorton@NOSPAM.com> wrote in message news:4fe379aa357643c390f9adb27961c136@newspe.com... >I have a server that got infected by the virus W32.Virut.B and was able to > clean it from all the infected files except one. The file that I cannot > clean is winmgnt.exe When I run Norton on it, it finds the virus but > cannot > > clean or quaranteen the virus and leaves it alone. I've tried to run > Norton > > in " Safe Mode " and also in " Safe Mode with Networking " but to no > avail. > > Thanks, > > Bill > > url:http://www.ureader.com/gp/1338-1.aspx To me an infected server is a compromised server. I would rebuild it immediately (or, in my case, drop back to the most recent image I have).
Guest Rahul Thakre Posted July 12, 2008 Posted July 12, 2008 Re: Virus W32.Virut.B "Pegasus (MVP)" wrote: > > "Bill Norton" <bnorton@NOSPAM.com> wrote in message > news:4fe379aa357643c390f9adb27961c136@newspe.com... > >I have a server that got infected by the virus W32.Virut.B and was able to > > clean it from all the infected files except one. The file that I cannot > > clean is winmgnt.exe When I run Norton on it, it finds the virus but > > cannot > > > > clean or quaranteen the virus and leaves it alone. I've tried to run > > Norton > > > > in " Safe Mode " and also in " Safe Mode with Networking " but to no > > avail. > > > > Thanks, > > > > Bill > > > > url:http://www.ureader.com/gp/1338-1.aspx > > To me an infected server is a compromised server. I would > rebuild it immediately (or, in my case, drop back to the most > recent image I have). > > >
Guest Rahul Thakre Posted July 12, 2008 Posted July 12, 2008 Re: Virus W32.Virut.B Dear Bill, This file may be running in memory thats why your anti-virus not able to delete it. Please use Process Explorer utility from Microsoft, to see to which services it gets licked with and then kill that process. "Pegasus (MVP)" wrote: > > "Bill Norton" <bnorton@NOSPAM.com> wrote in message > news:4fe379aa357643c390f9adb27961c136@newspe.com... > >I have a server that got infected by the virus W32.Virut.B and was able to > > clean it from all the infected files except one. The file that I cannot > > clean is winmgnt.exe When I run Norton on it, it finds the virus but > > cannot > > > > clean or quaranteen the virus and leaves it alone. I've tried to run > > Norton > > > > in " Safe Mode " and also in " Safe Mode with Networking " but to no > > avail. > > > > Thanks, > > > > Bill > > > > url:http://www.ureader.com/gp/1338-1.aspx > > To me an infected server is a compromised server. I would > rebuild it immediately (or, in my case, drop back to the most > recent image I have). > > >
Guest Pegasus \(MVP\) Posted July 12, 2008 Posted July 12, 2008 Re: Virus W32.Virut.B "Rahul Thakre" <RahulThakre@discussions.microsoft.com> wrote in message news:7065435D-F620-4594-814E-EF72C875E59A@microsoft.com... > Dear Bill, > > This file may be running in memory thats why your anti-virus not able to > delete it. > Please use Process Explorer utility from Microsoft, to see to which > services > it gets licked with and then kill that process. "licked with"? Interesting concept . . .
Recommended Posts