Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Virus Autorun and .exe not deleted

Created: 29 Nov 2012 • Updated: 29 Nov 2012 | 4 comments

Dear Symantec

 

Today i used SEP version 11 installed on window XP to scan virus and SEP updated lasted version but it could not find autorun and exe virus as below capture

Pls explain this problem and how to resovle it soon ?

Thanks so much

Comments 4 CommentsJump to latest comment

Glenn Jacobs's picture

What's the D disk? A  usb stick? or another hardisk?

 

Also, depsnd on your configuration. It doesn't scan removable drive only on access.

 

Did you create autorun.inf folder on your own? Or is this a real virus?

Mithun Sanghavi's picture

Hello,

I would suggest you to run the Symantec Support Tool and submit the Suspicious files to the Symantec Security Response Team.

Using Symantec Support Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.

It is also always recommended to -

1) Make sure you have the machine properly patched with Latest MS security updates and service packs.

2) Make sure you have a proper password placed on shared drives.

3) Disable the AutoRun feature via GPO.

http://support.microsoft.com/kb/953252

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Chetan Savade's picture

Hi,

It is recommended to install all the Symantec features AV / PTP/ NTP with latest definitions.Always make sure that your computers are receiving definitions regularly. Did you installed NTP as well?

It's also recommended to use latest SEP version i.e RU7 MP3 or SEP 12.1 RU2

Your windows machines should have all the latest windows updates /Patches.

Apply application and device control policies, block USB etc.

Disable Autorun. From SEP 12.1 Autorun is disabed by default.

Please follow best practice guide to handle virus issue.

www.symantec.com/business/support/index?page=conte...

If Symantec is not able to detect then try to scan with available tools.

Symantec Power Eraser

http://www.symantec.com/theme.jsp?themeid=spe-user...

Symantec Endpoint Recovery Tool (SERT)

http://www.symantec.com/docs/TECH131732

If above suggested steps couldn't help then

I would also suggest you to run the Symantec Support Tool and submit the Suspicious files to the Symantec Security Response Team.

Using Symantec Support Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.

 

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<