Endpoint Protection

Hi,

Dr. Web had identified this as a virus on one of my internal machines, However the machine is running an up to date version of End point with the most current signatures install and it has failed to find it. Is this detected by the end point client?

Thanks,
Phil.

Hi,

because there are millions of malwares with their old and new variants in the wild, it is normal that not all of them are known and detected by Symantec. The name of a malware is technically irrelevant.

Apply these steps:
1) are you sure that Endpoint does not detect the malware? You have to double-check it... download manually the latest rapid release antivirus definitions and run a full scan in safe mode with them installed.

2) nothing detected at step one? Well, send the malware to Symantec so they will analyze it and release the proper definitions in one or two days. Dr. Web already told you which files are infected but... in general you should be able to find out by your self the malware or ask to the Symantec Support for help on this.

3) did you already delete the malware? No sample, no Symantec definition, no detection... you will do it the next time...

But Dr. Web detected it, are Dr. Web better than Endpoint? No... someone else did the steps 1 and 2 for Dr. Web before you did it  for Symantec... and there is no malwares sharing between AV vendors... this is the business...

References (= more details):
service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/73537d3ec91e9d3288256a220027acf0