
14.2 Clean up the guest VM
You can clean up the affected guest VM by different methods, depending on how the VM has been
affected.
Some viruses leave no side-effects. Others may make changes or corrupt data.
If you can accept the loss of data, simply restore the VM. Use one of these methods:
■
Delete the affected guest VM and reclone it from the template image. Run a full scan of the
guest VM to ensure that it is clean.
■
Revert the affected guest VM to the previous known clean snapshot. Run a full scan of the guest
VM to ensure that it is clean.
Alternatively, use Sophos software to remove the threat. Use one of these methods:
■
Install the free Sophos Virus Removal Tool on the affected guest VM to remove the threat. You
can download the tool from www.sophos.com/en-us/products/free-tools/virus-removal-tool.aspx.
■
Install Sophos Endpoint Security and Control for Windows on the affected guest VM and use
it to remove the threat. You can download it from
www.sophos.com/en-us/support/downloads/standalone-installers/esc-for-windows-2000-up.aspx.
Important: If you use Sophos software, you should read the guidance in the next section, Clean
up with Sophos software (section 14.2.1).
14.2.1 Clean up with Sophos software
If you use Sophos Virus Removal Tool or Sophos Endpoint Security and Control to clean up a
threat, you must do as follows:
1. Install Virus Removal Tool or Endpoint Security and Control.
2. Stop the vShield Endpoint Thin Agent. As an Administrator, in a Command Prompt window,
type:
net stop vsepflt
3. Clean up the threat.
Note: If you are using Endpoint Security and Control, uninstall it before you restart the
guest VM or restart the Thin Agent.
4. Restart the Thin Agent. Type:
net start vsepflt
26
Sophos Anti-Virus for VMware vShield
Komentarze do niniejszej Instrukcji