Endpoint Protection

 View Only

  • 1.  symantec alert trogan.gen always and virus create folder on windows\temp\xxxx\setup.exe file

    Posted Aug 30, 2011 11:49 PM
      |   view attached

    My computer use symantec endpoint. today it show virus alert TROJAN.GEN always and information is virus is on C:\windows\temp\spqejx

    the folder name is random even if symantec clean it to quarantine but next 10 minutes it will show alert again and random folder.

    I would like to know How symantec can clean this trojan?

    Please suggest.



  • 2.  RE: symantec alert trogan.gen always and virus create folder on windows\temp\xxxx\setup.exe file

    Posted Aug 31, 2011 12:02 AM

    Best to call into Symantec Support for them to assist you better.

    Looks like you have a dropper somewhere there.



  • 3.  RE: symantec alert trogan.gen always and virus create folder on windows\temp\xxxx\setup.exe file

    Posted Aug 31, 2011 02:29 AM

    Symantec doesn't have tool for remove trojan.gen?



  • 4.  RE: symantec alert trogan.gen always and virus create folder on windows\temp\xxxx\setup.exe file

    Posted Aug 31, 2011 02:47 AM

    The fact you have a Trojan.Gen detection is the proof we have the removal.

    Trojan.Gen is a generic detection for files that exhibit trojan like activity, therefore if the issue persists best to call to our Support team for us to assist you better.



  • 5.  RE: symantec alert trogan.gen always and virus create folder on windows\temp\xxxx\setup.exe file

    Posted Aug 31, 2011 05:56 AM

    Why symantec has detection and unable clean out from windows System permanently?



  • 6.  RE: symantec alert trogan.gen always and virus create folder on windows\temp\xxxx\setup.exe file

    Posted Aug 31, 2011 08:57 AM

    There are two tools that Symantec provides to remove hard to find threats.

    Power Eraser - http://www.symantec.com/business/security_response/malware.jsp

    SERT - http://www.symantec.com/business/support/index?page=content&id=TECH131732&locale=en_US

     

    Let us know if either of these tools helped solve your issue.

     

    Best,

    Thomas