Endpoint Protection

 View Only
  • 1.  virus content

    Posted Mar 04, 2013 06:03 AM

    I am havin one of the system where symantec not getting installed. As per my observation there virus are availalbe.

    Try to open the task manager it is disable.

    Try to open the Run Tab but when select it, it display "don't create a shortcut file"

    I have copied the symantec on system but folder is not getting open and size of folder is zero.



  • 2.  RE: virus content

    Posted Mar 04, 2013 06:12 AM

    This sounds like a virus infection. Scan your using with the tools found here:

    https://www-secure.symantec.com/connect/forums/your-system-infected-symantec-tools-help-clear-infection



  • 3.  RE: virus content

    Posted Mar 04, 2013 06:15 AM

    Boot the machine in safemode

    enable msiexec 

    then install SEP and run a full scan.

    https://www-secure.symantec.com/connect/blogs/windows-installer-safe-mode

    http://www.symantec.com/business/support/index?page=content&id=TECH148376



  • 4.  RE: virus content
    Best Answer

    Broadcom Employee
    Posted Mar 04, 2013 09:54 AM

    Hi,

    It seems that machine is infected. Isolate the machine from the network.

    Use Power Eraser to detect threat and remove them

    http://www.symantec.com/theme.jsp?themeid=spe-user-guide

    Also can use  SERT to boot on a CD and clean your machine

    http://www.symantec.com/docs/TECH131732

    Best practices for responding to active threats on a network

    http://www.symantec.com/docs/TECH122466



  • 5.  RE: virus content

    Posted Mar 04, 2013 02:23 PM

    if its a client machine disconnect it from netwrok, Format the machine then install SEP.

    Or else you can run NPE and other tools clean it then install SEP.



  • 6.  RE: virus content

    Posted Mar 05, 2013 02:16 AM

    Follow what Chetan suggest, use SERT with latest definition and clean the PC.

     

    You may need ppl expertise or other tool if SERT unable to detect it...



  • 7.  RE: virus content

    Posted Mar 05, 2013 02:26 AM

    Hi,

    Agreed with Vikram, Please follow Vikram above comments.



  • 8.  RE: virus content

    Posted Mar 06, 2013 12:21 PM

    Hi,

    I can try as per above mention links but i will not able to reinstall the OS on system because that system is work as a application server.



  • 9.  RE: virus content

    Broadcom Employee
    Posted Mar 06, 2013 12:24 PM

    run SERT tool and check if the files can be removed. can you post the sep_inst.log?



  • 10.  RE: virus content

    Posted Mar 11, 2013 05:25 AM

    Any finding from SERT scan?

     

    certain PC at certain environment cant be formated easily... i.e holding legacy software, hosting files etc ....

     

    please get assistant from expert if you're not sure (open support case etc)