Endpoint Protection

 View Only
  • 1.  Browser hijack affecting wireless connection not wired

    Posted Nov 15, 2011 12:35 PM

    Sorry in advance if I'm posting this wrong, but I have tried googling this issue and searched through the forums and haven't found a post that relates to this issue.

    I have several users that appear to have been infected by a browswer hijack that is only affecting the wireless and not the wired connection.

    I have tried running scans in safe-mode as well as other tools like malware bytes and search and destory and none of them find anything.  Sometimes deleting the profile works, but more often we have to reimage the machine.  Here is a screencap of what comes up in the browser, hopefully this helps in identifiying the culprit and pointing me to a solution.

     

    Thanks for any help you can provide!

     

    Dan



  • 2.  RE: Browser hijack affecting wireless connection not wired

    Posted Nov 15, 2011 12:44 PM

    There are some useful tools that are provided by Symantec that can help with finding those hard to detect threats.

    1. The Power Eraser Tool eliminates deeply embedded and difficult to remove threats that traditional virus scanning doesn't always detect.

    2. The SERT (Symantec Endpoint Recovery Tool)is useful in situations where computers are too heavily infected for the Symantec Endpoint Protection client installed upon them to clean effectively.

    3. The Load point Analysis Tool generates a detailed report of the programs loaded on your system. It is helpful in listing common loadpoints where threats can live.

    Power Eraser tool – http://bit.ly/Malwaretools

     

    How To Use the Symantec Endpoint Recovery Tool with the Latest Virus Definitions –http://www.symantec.com/business/support/index?page=content&id=TECH131732&locale=en_US

     

    Support Tool with Power Eraser Tool included –

    http://www.symantec.com/business/support/index?page=content&id=TECH105414&locale=en_US

    How to use the Load Point Analysis within the Symantec Support Tool to help locate suspicious files http://www.symantec.com/business/support/index?page=content&id=TECH141402