Security Basics mailing list archives

Re: w32.donk.s


From: GuidoZ <uberguidoz () gmail com>
Date: Tue, 7 Dec 2004 20:52:41 -0500

Anyone have any suggestions on removing w32.donk.s virus form XP- PRO
machines.
After following Symantec clean up procedure to the letter still being
detected by antivirus.

Depends on where it's still being detected. If it's in the _restore
folder, then you'll need to disable System Restore. A quick Google
search will help you to do that if you're unsure how. (Symantec's
instructions should be near the top IIRC.)

If the infected file(s) are NOT in the restore section, then you may
need to kill running processes (such as scchost.exe). Obviously if an
infected process is also a system critical process, this solution
won't work. If that's the case, you can try  scanning from Safe Mode.
(Again, Google howto if you're unsure.)

Last but not least, have you tried other AV companies methods? There
are plenty out there[1]. Best of luck and HTH.

[1] - http://www.google.com/search?&q=remove+donk+virus

--
Peace. ~G


On Tue, 7 Dec 2004 13:07:21 -0500, Calvin.Walker () phila gov
<Calvin.Walker () phila gov> wrote:
Anyone have any suggestions on removing w32.donk.s virus form XP- PRO
machines.
After following Symantec clean up procedure to the letter still being
detected by antivirus.

Calvin Walker/L&I
LAN Administrator
IT Unit
215-686-2460




Current thread: