Virus W32.Virut.B

[Guest Bill Norton]

I have a server that got infected by the virus W32.Virut.B and was able to

clean it from all the infected files except one. The file that I cannot

clean is winmgnt.exe When I run Norton on it, it finds the virus but cannot

 

clean or quaranteen the virus and leaves it alone. I've tried to run Norton

 

in " Safe Mode " and also in " Safe Mode with Networking " but to no avail.

 

Thanks,

 

Bill

 

url:http://www.ureader.com/gp/1338-1.aspx

[Guest Pegasus \(MVP\)]

Re: Virus W32.Virut.B

 

 

"Bill Norton" <bnorton@NOSPAM.com> wrote in message

news:4fe379aa357643c390f9adb27961c136@newspe.com...

>I have a server that got infected by the virus W32.Virut.B and was able to

> clean it from all the infected files except one. The file that I cannot

> clean is winmgnt.exe When I run Norton on it, it finds the virus but

> cannot

>

> clean or quaranteen the virus and leaves it alone. I've tried to run

> Norton

>

> in " Safe Mode " and also in " Safe Mode with Networking " but to no

> avail.

>

> Thanks,

>

> Bill

>

> url:http://www.ureader.com/gp/1338-1.aspx

 

To me an infected server is a compromised server. I would

rebuild it immediately (or, in my case, drop back to the most

recent image I have).

[Guest Rahul Thakre]

Re: Virus W32.Virut.B

 

 

 

"Pegasus (MVP)" wrote:

>

> "Bill Norton" <bnorton@NOSPAM.com> wrote in message

> news:4fe379aa357643c390f9adb27961c136@newspe.com...

> >I have a server that got infected by the virus W32.Virut.B and was able to

> > clean it from all the infected files except one. The file that I cannot

> > clean is winmgnt.exe When I run Norton on it, it finds the virus but

> > cannot

> >

> > clean or quaranteen the virus and leaves it alone. I've tried to run

> > Norton

> >

> > in " Safe Mode " and also in " Safe Mode with Networking " but to no

> > avail.

> >

> > Thanks,

> >

> > Bill

> >

> > url:http://www.ureader.com/gp/1338-1.aspx

>

> To me an infected server is a compromised server. I would

> rebuild it immediately (or, in my case, drop back to the most

> recent image I have).

>

>

>

[Guest Rahul Thakre]

Re: Virus W32.Virut.B

 

Dear Bill,

 

This file may be running in memory thats why your anti-virus not able to

delete it.

Please use Process Explorer utility from Microsoft, to see to which services

it gets licked with and then kill that process.

 

 

 

 

"Pegasus (MVP)" wrote:

>

> "Bill Norton" <bnorton@NOSPAM.com> wrote in message

> news:4fe379aa357643c390f9adb27961c136@newspe.com...

> >I have a server that got infected by the virus W32.Virut.B and was able to

> > clean it from all the infected files except one. The file that I cannot

> > clean is winmgnt.exe When I run Norton on it, it finds the virus but

> > cannot

> >

> > clean or quaranteen the virus and leaves it alone. I've tried to run

> > Norton

> >

> > in " Safe Mode " and also in " Safe Mode with Networking " but to no

> > avail.

> >

> > Thanks,

> >

> > Bill

> >

> > url:http://www.ureader.com/gp/1338-1.aspx

>

> To me an infected server is a compromised server. I would

> rebuild it immediately (or, in my case, drop back to the most

> recent image I have).

>

>

>

[Guest Pegasus \(MVP\)]

Re: Virus W32.Virut.B

 

 

"Rahul Thakre" <RahulThakre@discussions.microsoft.com> wrote in message

news:7065435D-F620-4594-814E-EF72C875E59A@microsoft.com...

> Dear Bill,

>

> This file may be running in memory thats why your anti-virus not able to

> delete it.

> Please use Process Explorer utility from Microsoft, to see to which

> services

> it gets licked with and then kill that process.

 

"licked with"? Interesting concept . . .