Endpoint Protection

 View Only

  • 1.  Virus Autorun and .exe not deleted

    Posted Nov 29, 2012 04:47 AM

    Dear Symantec

     

    Today i used SEP version 11 installed on window XP to scan virus and SEP updated lasted version but it could not find autorun and exe virus as below capture

    Pls explain this problem and how to resovle it soon ?

    Thanks so much



  • 2.  RE: Virus Autorun and .exe not deleted

    Posted Nov 29, 2012 05:04 AM

    What's the D disk? A  usb stick? or another hardisk?

     

    Also, depsnd on your configuration. It doesn't scan removable drive only on access.

     

    Did you create autorun.inf folder on your own? Or is this a real virus?



  • 3.  RE: Virus Autorun and .exe not deleted

    Posted Nov 29, 2012 05:09 AM

    HI,

    Check this thread

    https://www-secure.symantec.com/connect/forums/system-infacted-virus



  • 4.  RE: Virus Autorun and .exe not deleted

    Trusted Advisor
    Posted Nov 29, 2012 05:27 AM

    Hello,

    I would suggest you to run the Symantec Support Tool and submit the Suspicious files to the Symantec Security Response Team.

    Using Symantec Support Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.

    It is also always recommended to -

    1) Make sure you have the machine properly patched with Latest MS security updates and service packs.

    2) Make sure you have a proper password placed on shared drives.

    3) Disable the AutoRun feature via GPO.

    http://support.microsoft.com/kb/953252

    Hope that helps!!



  • 5.  RE: Virus Autorun and .exe not deleted

    Broadcom Employee
    Posted Nov 29, 2012 09:14 AM

    Hi,

    It is recommended to install all the Symantec features AV / PTP/ NTP with latest definitions.Always make sure that your computers are receiving definitions regularly. Did you installed NTP as well?

    It's also recommended to use latest SEP version i.e RU7 MP3 or SEP 12.1 RU2

    Your windows machines should have all the latest windows updates /Patches.

    Apply application and device control policies, block USB etc.

    Disable Autorun. From SEP 12.1 Autorun is disabed by default.

    Please follow best practice guide to handle virus issue.

    www.symantec.com/business/support/index?page=content&id=TECH105236

    If Symantec is not able to detect then try to scan with available tools.

    Symantec Power Eraser

    http://www.symantec.com/theme.jsp?themeid=spe-user-guide

    Symantec Endpoint Recovery Tool (SERT)

    http://www.symantec.com/docs/TECH131732

    If above suggested steps couldn't help then

    I would also suggest you to run the Symantec Support Tool and submit the Suspicious files to the Symantec Security Response Team.

    Using Symantec Support Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.