i am using windows server 2003 enterprise edition as my oprating system and symantec as antivirus. symatec finding a thread Infostealer.Lineage in window/system32 this thread is not removing from file. i use instructions giving in following url but its not effective.
http://securityresponse.symantec.com/sec...
how i can this thread by my sytem?
How to remove Infostealer.Lineage?viruses
1.) Remove from autostart, shut down process with Windows tools or external toot from Sysinternals and reboot. It is helpless when it has no active instance active instance.
2.) Use a tool such as unlocker to try to delete immediately after the virus is shut down or after reboot. Provided You know location of the files.
3.) After this You should proceed as described by Yourself / since You have their product.
4.) If this does not help for some reason.
Generate an External boot CD (or get one from a PC magazines page or CD ). The best Windows Solution for that is Bart's PE.
The virus is helpless because inactive when not started.
You only need the tools to search and destroy.
The creation of a Bart's PE CD is a one time investment of work.
An external Boot CD is ultimate ratio for any Rootkit or other malware infection. The CD as such can be of much other use.
It can for example access PCs without needing a password.
Thanx for reading my post
No comments:
Post a Comment