Endpoint Protection

Hi,

 

I am unable to remove Samsvc.exe from system through SEP 12.1.5.

 

Please suggest.

 

 

Submit a sample to Symantec. Do you know it is malicious? If SEP doesn't detect it then you need to manually remove.

Hello,

Why do you want to remove the Samsvc.exe via Symantec Endpoint Protection 12.1 RU5?

Is this file suspicious or malicious?

If yes, submit the file to Symantec Security Response for examination, after the computer upon which they are found has been isolated.  Some good articles:  

Best Practices for Troubleshooting Viruses on a Network
http://www.symantec.com/docs/TECH122466

Scanning a file with a competitor's antivirus program detects a virus, but scanning with Symantec Endpoint Protection does not
http://www.symantec.com/docs/TECH98929

How to Use the Web Submission Process to Submit Suspicious Files
http://www.symantec.com/docs/TECH102419

What to do when you suspect that a Symantec AntiVirus product is not detecting viruses

 

http://www.symantec.com/business/support/index?page=content&id=TECH99222

 

Just to rule out a typo: Do you mean samsvc.exe or semsvc.exe? The latter is the main service of SEPM and will be probably protected by SEP's tamper protection.

Hi Gerg.

 

Its Samsvc.exe.

 

 

You can submit that file to symantec for analysis.

https://submit.symantec.com/retail

Hi Tridip.Kumar.Mitra,

I gather that this is a suspected malware file.  Can you provide some additional information-?  Is this being detected but not removed, or is it not being detected at all?  Have you tried blocking it by MD5 using SEP's ADC component- does that work?  How about with Power Eraser in SymHelp?

What's the tracking number of your submission?  Feel free to PM it to me.

Symantec Insider Tip: Successful Submissions!
https://www-secure.symantec.com/connect/articles/symantec-insider-tip-successful-submissions

 

Many thanks in advance!

Mick

 

Hi again,

Just pinging for an update- was this resolved?  the case is still marked "needs solution."

With best regards,

Mick

Hi mick,

 

Issue resolved after update the SEPM.

 

Regards

Tridip