One of remote location systems are infected with virus. When copy any file of exe virus can corrupt that file.

How to clean it?

No internet connection on branch. Any bootable process to recver the systems?

run this tool

How To Use the Symantec Endpoint Recovery Tool with the Latest Virus Definitions

Hi,

Make sure that your system should have latest anti virus definition and all latest ms patches.

Please check this article.

Best Practices for Troubleshooting Viruses on a Network

http://www.symantec.com/business/support/index?page=content&id=TECH122466&profileURL=https%3A%2F%2Fsymaccount-profile.symantec.com%2FSSO%2Findex.jsp%3FssoID%3D13714430163112KeG3VM3jQ7NtqhBW9nsVXXwS2386h11Yt6Uc

http://security.symantec.com/nbrt/overview.aspx?

copy the latest definition into USB and update the system
scan the machine in safe mode.
collect the loadpoint logs and check for suspciouc file.Upload for security response.
 

Is it work without internet connectivity?

Exe file getting corrupt when copy so not possible to update system

yes 

Do a safe mode scan and then try to update definition on the system.

thanks, i downloading the tool from file connect.

than you go ahead with SERT which is bootable and scan the system with the latest definition.

Thanks, downloading is in process.

I have download the tool part from file connect not found the sert tool

Please help to download the tool

Hi,

Please call tech support and ask for the SERT, Tech support team will share the path (FTP or File share).

For the same you required support ID.

Symantec Endpoint Recovery Tool (SERT)

https://www-secure.symantec.com/connect/articles/symantec-endpoint-recovery-tool-sert

Symantec Endpoint Recovery Tool (SERT) download comes as an ISO (disk image). How do I use this?
http://www.symantec.com/business/support/index?page=content&id=TECH131685

How To Use the Symantec Endpoint Recovery Tool with the Latest Virus Definitions
http://www.symantec.com/business/support/index?page=content&id=TECH131732

Contact with Symantec Support Team and get the tool

Create a case with with Symantec Technical Support Team.

How to create a new case in MySupport

http://www.symantec.com/docs/TECH58873

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

• United States: https://support.broadcom.com (407-357-7600 from outside the United States)
• Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
• United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

if you log in to https://fileconnect.symantec.com

you will find Symantec-endpoint_recorty_tool_allwin_win.iso

you need to download this, if its missing then you need to call support so that they can add this to your existing serial number.

Hello,

It available in Fileconnect.

Sort the product desription with Endpoint Recovery Tool and choose limit file list

Name - Symantec_Endpoint_Recovery_Tool_2.0.24_AllWin_EN.iso

Hi

Please download the SERT tool to scan the infected system

Regards

Here is a good article on SERT:

https://www-secure.symantec.com/connect/articles/symantec-power-eraser-using-symantec-help-symhelp-tool

The Power Eraser builtint SymHelp is what I would start with, though....

https://www-secure.symantec.com/connect/articles/symantec-power-eraser-using-symantec-help-symhelp-tool

Log a case with with Symantec Technical Support.

I download the tool but it require pin for i agree?

That will be given by Support

Symantec Endpoint Recovery Tool (SERT) requires a PIN to run

@Rafeeq - Today i call to symantec support and get the pin. I have one more query that key is permanent or for trail time period?

I'm not sure :) should be permanent one for this release of SERT.

Hello,

You can also use the tirck "Jwelina" mention in forum

https://www-secure.symantec.com/connect/forums/sert-tool

Hi

Please submit the suspicious files to Symantec Secuirty Response so that they can build a new set of revisions as the file would be a new variant.

Regards