| 1.1.2. Symantec Endpoint Recovery Tool CD-ROM Boot Disk or equivalent |
| 1.1.2.2. Did it find and Eliminate Threat? |
 | 1.1.2.2.1. If Yes, consider acquiring binary for online analysis at |
| 1.1.2.2.2. If No Then consider 1.1.6 for memory analysis of |
| 1.1.2.1. LINK http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010041515464348 |