Endpoint Protection Small Business Edition

Hello, 

    For any exe program (notepad,word,powerpoint etc) that we are trying to run in one of the PCs, we are receving error " Windows can not access the specified device,path or file.You may not have the appropriate permissions to access the item." I doubt it may be some virus , however somehow symantec is not detecting this virus. Please help. 

You can run the symhelp to verify the virus http://www.symantec.com/docs/TECH215519

You can scan your system symhelp tool How to run the Threat Analysis Scan in Symantec Help (SymHelp) Article:TECH215519|Created: 2014-03-03|Updated: 2014-07-10|Article URL http://www.symantec.com/docs/TECH215519 See mithun articles Using Symantec Help (SymHelp) Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team https://www-secure.symantec.com/connect/articles/using-symantec- help-symhelp-tool-how-do-we- collect-suspicious-files-and-submit- same-symante You will want to submit these suspicious files, to the Symantec Security Response for analysis, For Retail License Holders https://submit.symantec.com/retail

Need to run synhelp and collect a sample to submit

How to collect and submit to Symantec Security Response suspicious files found by the SymHelp utility

Hi,

   I observed that in that particular PC, there is a folder winshell in C drive which winseven.exe file (may be a virus). But when I scanned the C drive with symantec end point, no malicious file is detected. Please help.

 

If you have doubt about that file i suggest you to submit that file to symantec

https://submit.symantec.com/websubmit/bcs.cgi

Symantec will analysis it and create the defintion aganst that virus.

I also recommend you to scan the system with symhelp utility and submit the report to symantec for safe the system from other virus which can be cover in that report.

http://www.symantec.com/docs/TECH215519

If symantec not detect virus you need to submit for submission. It best bet you can reimage os if after submission nt found virus

Hi Tabish1,

Here is the best article for dealing with infections:

 

Best Practices for Troubleshooting Viruses on a Network
http://www.symantec.com/docs/TECH122466

 

Just checking if you submitted that file to Security Response for examination?  There is no way to tell if it is malicious or not until it has been examined.  The name alone does not mean a thing.

Symantec Insider Tip: Successful Submissions!
https://www-secure.symantec.com/connect/articles/symantec-insider-tip-successful-submissions

 

Many thanks!

Mick

Hi Tabish1,

Just a ping to see if there is any update to this thread?  Many thanks in advance!

Mick

Looks like the malware has molested your Image FIle Execution in the registry .

How does your IFE (Image File execution options) for your applcations  look like in the registry . DO you see a stale / Invalid / Wrong entry ? (Compare it with a working machine )

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\currentversion\image file execution options.