Use the tools here to clean the infection

https://www-secure.symantec.com/connect/forums/you...

Since you know the directories, create an application control policy to stop files from executing from those locations.

Have you tried a second opinion scanner such as malwarebytes or hitman pro?

hi,

You can create support ticket for this issue.symantec techinal support will help for this issue

Thanks brian for your responce but this is not happened on sigle machine so I cant use malwarebytes. This spreads on multiple machines and I wanted to do something which can do centralized solution for all machines.

Hi Brian can u advice in details so that it will more helpful to me as I have alraedy reserched and googled.

I have almost resolved all the issues but still same behaviour getting from diffrent named viruses.  can u guide me for preventing through ADC.

Hello,

Could you please PM me your Tracking numbers?

Secondly in your case, it is advisable to follow few important steps:

1) Make sure all these machines are Patched with ALL Latest MS security patches and service packs.

2) Make sure the machines are installed with the Latest Symantec virus definitions.

3) Disable the Autorun Feature on the machine.

Preventing a virus from using the AutoRun feature to spread itself

http://www.symantec.com/business/support/index?page=content&id=TECH104447

Later, incase of suspicious activity still happening, then follow the steps provided in the Article below:

Using Symantec Help (SymHelp) Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.

Hope that helps!!