Endpoint Protection

 View Only

  • 1.  How to remove VBS.Runauto

    Posted Aug 23, 2015 10:42 PM
      |   view attached

    Hi There,

    Wondering if anyone can advise how to permanently remove VBS.Runauto from the windows server.

    I'm using SEP version 12.1.5 managed client. In one of the shared server, this virus were detected and quarantined. Even with that, I noticed there are a lot shorcut file were created by this virus e.g. thumb.db, autorun.inf and [folder].inf.

    The worst part is that when I perform rescan, this virus again was detected in all my local drive.

     

    Appreciate your advise on this matter.

     

    Thank you.

     

    regards,

    Jim

     



  • 2.  RE: How to remove VBS.Runauto

    Posted Aug 23, 2015 10:45 PM
    Download the symhelp tool and run the threat analysis scan from it. Link to it is here http://www.symantec.com/docs/TECH170735 Also is a USB being plugged into the system? Have you disabled autorun/autoplay on the system?


  • 3.  RE: How to remove VBS.Runauto

    Posted Aug 24, 2015 11:32 AM

    Hi jim1292,

    A full scan of the USB or network drive is a very good first step- those seldom are thoroughly scanned.  If that does not turn up anything, then do try SymHelp's Threat Analysis Scan directed at the USB or Network drive.

    Using Today's SymHelp to Combat Today's Threats
    https://www-secure.symantec.com/connect/articles/using-todays-symhelp-combat-todays-threats

     

    Please do keep the thread up-to-date with your progress! &: )

    Mick