Windows 2000 Virus W32.Virut.B

  • Thread starter Thread starter Bill Norton
  • Start date Start date
B

Bill Norton

I have a server that got infected by the virus W32.Virut.B and was able to
clean it from all the infected files except one. The file that I cannot
clean is winmgnt.exe When I run Norton on it, it finds the virus but cannot

clean or quaranteen the virus and leaves it alone. I've tried to run Norton

in " Safe Mode " and also in " Safe Mode with Networking " but to no avail.

Thanks,

Bill

url:http://www.ureader.com/gp/1338-1.aspx
 
"Bill Norton" <bnorton@NOSPAM.com> wrote in message
news:4fe379aa357643c390f9adb27961c136@newspe.com...
>I have a server that got infected by the virus W32.Virut.B and was able to
> clean it from all the infected files except one. The file that I cannot
> clean is winmgnt.exe When I run Norton on it, it finds the virus but
> cannot
>
> clean or quaranteen the virus and leaves it alone. I've tried to run
> Norton
>
> in " Safe Mode " and also in " Safe Mode with Networking " but to no
> avail.
>
> Thanks,
>
> Bill
>
> url:http://www.ureader.com/gp/1338-1.aspx

To me an infected server is a compromised server. I would
rebuild it immediately (or, in my case, drop back to the most
recent image I have).
 
"Pegasus (MVP)" wrote:

>
> "Bill Norton" <bnorton@NOSPAM.com> wrote in message
> news:4fe379aa357643c390f9adb27961c136@newspe.com...
> >I have a server that got infected by the virus W32.Virut.B and was able to
> > clean it from all the infected files except one. The file that I cannot
> > clean is winmgnt.exe When I run Norton on it, it finds the virus but
> > cannot
> >
> > clean or quaranteen the virus and leaves it alone. I've tried to run
> > Norton
> >
> > in " Safe Mode " and also in " Safe Mode with Networking " but to no
> > avail.
> >
> > Thanks,
> >
> > Bill
> >
> > url:http://www.ureader.com/gp/1338-1.aspx
>
> To me an infected server is a compromised server. I would
> rebuild it immediately (or, in my case, drop back to the most
> recent image I have).
>
>
>
 
Dear Bill,

This file may be running in memory thats why your anti-virus not able to
delete it.
Please use Process Explorer utility from Microsoft, to see to which services
it gets licked with and then kill that process.




"Pegasus (MVP)" wrote:

>
> "Bill Norton" <bnorton@NOSPAM.com> wrote in message
> news:4fe379aa357643c390f9adb27961c136@newspe.com...
> >I have a server that got infected by the virus W32.Virut.B and was able to
> > clean it from all the infected files except one. The file that I cannot
> > clean is winmgnt.exe When I run Norton on it, it finds the virus but
> > cannot
> >
> > clean or quaranteen the virus and leaves it alone. I've tried to run
> > Norton
> >
> > in " Safe Mode " and also in " Safe Mode with Networking " but to no
> > avail.
> >
> > Thanks,
> >
> > Bill
> >
> > url:http://www.ureader.com/gp/1338-1.aspx
>
> To me an infected server is a compromised server. I would
> rebuild it immediately (or, in my case, drop back to the most
> recent image I have).
>
>
>
 
"Rahul Thakre" <RahulThakre@discussions.microsoft.com> wrote in message
news:7065435D-F620-4594-814E-EF72C875E59A@microsoft.com...
> Dear Bill,
>
> This file may be running in memory thats why your anti-virus not able to
> delete it.
> Please use Process Explorer utility from Microsoft, to see to which
> services
> it gets licked with and then kill that process.

"licked with"? Interesting concept . . .
 
Back
Top