WE ARE USING SYMANTEC ENDPOINT ANTIVIRUS. IN OUR NETWORK ALL MACHINES ARE IN DOMAIN AND EACH AND EVERY MACHINE WE HAVE BLOCKED SYSTEM AND SYTEM32 WRITE PERMISSION.LAST NIGHT SYMANTEC DELETED SOME EXE FROM TEMP FOLDER.AND THE IT IS COMING CONTINOUSLY.I HAVE CHECK THE CLIENT MACHINE THERE IS SOME UNWANTED EXE IN TEMP AND IN START-->PROGRAM--->STARTUP WE HAVE CHECKED LOTS OF UNWANTED EXE ARE SHOWING LIKE AVPRO_2010.EXE, MHBUPD32.EXE AND THE MACHINE IS HANGED.WE HAVE ALREADY UPLOADED THE EXES AND GOT TRACKING ID BUT TILL NOW WE DON'T GET CALL FROM SYSMANTEC BUT ALREADY TWO DAYS GONE.CAN ANYBODY HELP ME OUT....
Soumya Ghosh
Network Executive
Shriram Insight Share Brokers Limited