Video Screencast Help

My Client Machine Infected Virus ( faebec4a.exe )

Created: 30 Sep 2013 • Updated: 26 Feb 2014 | 5 comments
This issue has been solved. See solution.

Hi

I have a problem. my client machine be found a virus.. when i insert USB, all file in the USB create shortcut and original file be hidden..
I've tried using some way, that is Run full scan (not detected), Scan with tools SERT (not detected), using attrib -r -a -s -h /s /d in cmd but when i insert USB the virus appears again..

Please give me a solution or link for submit this virus !!

Thanks,

Operating Systems:

Comments 5 CommentsJump to latest comment

.Brian's picture

Submit here

http://www.symantec.com/security_response/submitsa...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SOLUTION
Mithun Sanghavi's picture

Hello,

I would advise you to upload this suspicious file to the Symantec Security Response Team on - 

https://submit.symantec.com/essential

OR

http://www.threatexpert.com

Secondly in your case, it is advisable to follow few important steps:

1) Make sure all these machines are Patched with ALL Latest MS security patches and service packs.

2) Make sure the machines are installed with the Latest Symantec virus definitions.

3) Disable the Autorun Feature on the machine.

Preventing a virus from using the AutoRun feature to spread itself

http://www.symantec.com/business/support/index?page=content&id=TECH104447

Later, incase of suspicious activity still happening, then follow the steps provided in the Article below:

Using Symantec Help (SymHelp) Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SameerU's picture

Hi

Submit the suspicious files to Symantec Security Response for analysing.

Regards

 

.Brian's picture

Did you get this submitted and defs created?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

.Brian's picture

Do you need more assistance with your problem or were you able to get it resolved?

If you could post an update for followers of this thread that would be most helpful.

Otherwise, if resolved, you can close the thread out by clicking the "Mark as solution" link at the bottom left on the most helpful post. This will benefit admins looking for a resolution to the same problem.

Thanks and take care,
Brian

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.