Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

SEP notification

Updated: 15 Jul 2010 | 8 comments
Dream_Chaser's picture
Dream_Chaser
0 0 Votes
Login to vote

i m using SEP 11 MR4. total 85 clients are connected with this SEP. now a days every user facing a notifications everytime. my virus database is upto date. i do complete scan every computer and detected a virus and already deleted. but same result. please anyone tell me what to do.

see the below attached pic.

discussion Filed Under:
, , , , ,

Comments

Prachand's picture
24
Nov
2009
0 Votes 0
Login to vote
Prachand
Trusted Advisor

Title: 'Simple steps to

Title: 'Simple steps to protect yourself from the Conficker Worm'
Document ID: 2009033012483648
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009033012483648?Open&seg=ent

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Vikram Kumar-SAV to SEP's picture
24
Nov
2009
0 Votes 0
Login to vote
Vikram Kumar-SAV to SEP
Symantec Employee
Accredited

 Patch your systems, its the

 Patch your systems, its the main reason for downadup. Enable IPS and risk tracer see which system is re-infecting others. Patch it aswell.

VMWARE-- SEP 12.1 vs McAfee vs Trend Micro

Dream_Chaser's picture
24
Nov
2009
0 Votes 0
Login to vote
Dream_Chaser

re

Dear vikram

could u plz explain it more clear to me???

Vikram Kumar-SAV to SEP's picture
24
Nov
2009
0 Votes 0
Login to vote
Vikram Kumar-SAV to SEP
Symantec Employee
Accredited

 ENable Network Threat

 ENable Network Threat Protection on your system if it is then check the IPs logs they will show which computers are attcking.Most of the times it has been seen that there is one or two un-patched system in the network that spread this worm to everybody. 

So once you find the vulnerable system patch them with latest windows patches.
 
Even on the computers on which you see regular downadup detections update all the pending security patches to them.
 
Downadup can only infect via WIndow Vulnerability so make sure you don't leave any vulnerability on your system by applying the latest windows patches on them.

VMWARE-- SEP 12.1 vs McAfee vs Trend Micro

Dream_Chaser's picture
24
Nov
2009
0 Votes 0
Login to vote
Dream_Chaser

Re

I cant access the service.msc

Vikram Kumar-SAV to SEP's picture
24
Nov
2009
0 Votes 0
Login to vote
Vikram Kumar-SAV to SEP
Symantec Employee
Accredited

 What error are you getting

 What error are you getting ?

Is this system infected with some other threat which Symante is not detecting ?
Are able to open Task Manager , msconfig and Regedit ?

Download RapidRelease definitions and run full scan in safe mode if you suspect a threat on this system.

VMWARE-- SEP 12.1 vs McAfee vs Trend Micro

Dream_Chaser's picture
24
Nov
2009
0 Votes 0
Login to vote
Dream_Chaser

RE:

Dear Vikram,

Please see the attached picture. i already scan all the clients computer (full scan) no virus dected. but every time shows the attached message in the clients compter. please help.

Aaed Alqarta's picture
14
Jan
2010
0 Votes 0
Login to vote
Aaed Alqarta
Accredited
Certified

How to beat W32.Dowandup infections - Outbreak Scenario

Hi everyone,

I've been solving virus infection problems since a long time, and W32.Downadup has a complete chapter. I've added a new article called (How to beat W32.Dowandup infections - Outbreak Scenario)

https://www-secure.symantec.com/connect/articles/how-beat-w32downadup-infections-outbreak-scenario

If you have any comments/issues you are welcome to speak

 

Authorized Symantec Consultant - Symantec Certified Specialist - Experts-Exchange Certified Guru

Please don't forget to mark your thread solved

Technical Support

Symantec.com

Store

Community Stats

Total Content Items
Members
258,959