Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 6 subscribers
  • Views 21531 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Virus Removal Tool: Retrieve malware for submission?

JW99
I used the Virus Removal Tool to cleanup a CryptLocker infection yesterday. I'd like to retrieve the binary so I can submit it to VirusTotal. I see a SafeClean folder for the VRT -- is there a way to retrieve the items removed? Thanks.
:44797


This thread was automatically locked due to age.
Parents
  • 0

    Hello Steve_,

    Failed to create a SAVI factory

    Return value: 0x00000004

    this suggests it can't find/load the SAVI.dll. Can't say where it searches for this DLL if you have (only) the SVRT installed (you didn't uninstall it, did you?) but anyway scc.exe tries also the directory it is running from. SAVI.dll is in the \Program Files\Sophos\Sophos Virus Removal Tool\engine\ folder. Put scc.exe into this folder and run it from there.

    HTH
    Christian

    :47854
Reply
  • 0

    Hello Steve_,

    Failed to create a SAVI factory

    Return value: 0x00000004

    this suggests it can't find/load the SAVI.dll. Can't say where it searches for this DLL if you have (only) the SVRT installed (you didn't uninstall it, did you?) but anyway scc.exe tries also the directory it is running from. SAVI.dll is in the \Program Files\Sophos\Sophos Virus Removal Tool\engine\ folder. Put scc.exe into this folder and run it from there.

    HTH
    Christian

    :47854
Children
No Data