Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 6247 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

W32/Autorun-AMP

Fazlur_SDTL

Hi,

We are infected by W32/Autorun-AMP malware. SOPHOS can detect and can clean partially. It shows reboot required which we have done several times but no luck.

Attached I have given several screenshots. Suggest how to clean those?

:45821


This thread was automatically locked due to age.
virus status.pdf
Parents
  • 0

    Hello Fazlur_SDTL,

    many clients report error 0xa0250026 on the removal attempt - please check the SAV.txt log if there are any details.

    It's best to work with one client first (perhaps one where a xx.scr file is flagged). Please check if the files is still there after the reboot - if not, then clear the alerts and errors from the console and request a Full system scan. If the threat reappears or if the file hasn't been removed then I suggest you follow the SMaRT process.

    Christian

    :45829
Reply
  • 0

    Hello Fazlur_SDTL,

    many clients report error 0xa0250026 on the removal attempt - please check the SAV.txt log if there are any details.

    It's best to work with one client first (perhaps one where a xx.scr file is flagged). Please check if the files is still there after the reboot - if not, then clear the alerts and errors from the console and request a Full system scan. If the threat reappears or if the file hasn't been removed then I suggest you follow the SMaRT process.

    Christian

    :45829
Children
No Data