Endpoint Protection

I'm running endpoint protection and 2 of my servers  Windows 2003 std server got this virus. Does anyone have any info on this virus? (eg. how to remove it, because Symantec doesn't see it as a virus).


Thanks

Hi,

       Can you please upload this file in a zip format to the below mentioned link. The Security response team would take a look at it and come out with a solution.

To submit suspicious file to Symantec

https://submit.symantec.com/websubmit/gold.cgi

You also check this on www.virustotal.com .
But do submit this to security response team.

What is the contact id that i'm required to put in?

You must have that contact id if you have a valid support contract with symantec. this id is used when you create a case on mysupport page.


if you don't have that then pls call symantec and provide all the details like sl.no and others stuffs on license certificate and they will provide you  the contact id.

If you don't have any support contract then use the link below to submit

https://submit.symantec.com/websubmit/retail.cgi

but response to this will be late compare to gold support .

The file has been uploaded but I also followed your advice about the www.virustotal.com .
and quite a few antivirus programs out there picked it up with the exception of Norton of course.

Cool link though thanks.

 Assuming you have a valid maintenance contract, the contact ID would be listed there I believe.
Or call into support, perhaps they can look up your company name and validate support eligibility.  They will then walk you through how to submit those files for validation of a virus or infection.

Also try http://www.threatexpert.com/  with those files.  It's free and you get a response in minutes for the files if they are infected or not.  It's owned by Symantec!

Hi

I have a few PCs with this infection. The Machines are running Endpoint Protection but still got infected.
 
Does Symantec have a fix for this as yet?

Just wanted to let you know that you should start a new thread for this subject. The thread you posted onto is old and will be ignored by most in the forums (as you can see). Anyway this is most likely a new strain of this particular virus you are seeing and should be submitted to symantec using the links posted above.

Grant-