Advertisement

07.02.2008 at 08:10AM PDT, ID: 23533845
[x]
Attachment Details

Remove WIn32\Sality.W

Asked by isd721 in Server Anti-Virus, Windows 2003 Server

Tags: Microsoft, Server, 2003, Virus Infection

About a week ago our antivirus realtime protection detected Win32\Sality.W virus on one of our servers.  At the time it said it copied and cured the file.  I did a full system scan with CA, found viruses and cured them.  Ran another scan, no viruses found so I thought I was set.  Today I received another Realtime Alert stating the virus was found and copied and cured.  I'm currently running a full system scan and it has found infections.  My question is, how do I get rid of this thing once and for all?

In doing some research I checked for the following DLLs.  I do not have sysdll.dll, oledsp32.dll, and syslib32.dll.  Also, the wcdrtc32.dll process is not running.  One site I was doing research on said check for those.Start Free Trial
[+][-]07.03.2008 at 12:05AM PDT, ID: 21923286

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Server Anti-Virus, Windows 2003 Server
Tags: Microsoft, Server, 2003, Virus Infection
Sign Up Now!
Solution Provided By: legalsrl
Participating Experts: 1
Solution Grade: A
 
 
[+][-]07.21.2008 at 11:31AM PDT, ID: 22053108

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628