Endpoint Protection

 View Only
  • 1.  fuoawx.exe

    Posted Apr 20, 2016 01:29 AM

    All folders in my mapped network drives are change to shortcuts and it points to fuoawx.exe file. Does anybody encountered similar issue? How will i clean the affected frive. Need help. Thank you



  • 2.  RE: fuoawx.exe

    Trusted Advisor
    Posted Apr 20, 2016 01:54 AM

    It's a virus - you may need to do a restore from a backup, I'm afraid, as this is the quickest way to do this.



  • 3.  RE: fuoawx.exe

    Trusted Advisor
    Posted Apr 20, 2016 03:00 AM

    Try submitting the suspected file to Symantecif it's something symantec does not currently detect then symantec will add it to thier next rapid release (below link) protecting any future computers from getting infected.

    https://www.symantec.com/security_response/submitsamples.jsp

    As for the machine that is currently infected you would need to restore to a previous backup version or rebuild the machine. 



  • 4.  RE: fuoawx.exe

    Posted Apr 20, 2016 06:06 AM

    submit one of the files to symantec and they would release definition to elimiate this infection. meanwhile if I am not wrong, you files are likely to be safe and hidden. just try this

    in folder option under View button uncheck 

    Hide extentions for known file types &

    Hide protected operating system files.

     

    folder option.JPG



  • 5.  RE: fuoawx.exe

    Posted Apr 20, 2016 06:16 AM

    Hi jdespi,

    That sounds like W32.Silly.FDC or similar.  It's not possible to say just based on the description- we need a sample to analyze.  Please do submit that suspicious file "fuoawx.exe" to Security Response for examination.

    Symantec Insider Tip: Successful Submissions!
    https://www-secure.symantec.com/connect/articles/symantec-insider-tip-successful-submissions

    Can you supply information on your SEP infrastructure (components in use, etc) and if anything is being detected?

    Also:

    Virus removal and troubleshooting on a network
    http://www.symantec.com/docs/TECH122466 

    Do keep this thread up-to-date with your progress!

    With thanks and best regards,

    Mick



  • 6.  RE: fuoawx.exe

    Posted Apr 20, 2016 06:38 AM

    Configure your clients to detect and remove this file, see here:

    How to utilize SEP 12.1 for Incident Response - PART 1



  • 7.  RE: fuoawx.exe

    Posted Apr 22, 2016 04:38 AM

    Hi jdespi,

    Just  ping to see if you ever made that submission and received an answer?  Please do update this thread.

    With thanks and best regards,

    Mick