Video Screencast Help
Scheduled Maintenance: Symantec Connect is scheduled to be down Saturday, April 19 from 10am to 2pm Pacific Standard Time (GMT: 5pm to 9pm) for server migration and upgrades.
Please accept our apologies in advance for any inconvenience this might cause.

W32. Virut. CF

Created: 17 Sep 2010 • Updated: 18 Oct 2010 | 3 comments
This issue has been solved. See solution.

Dear all,

Attached is a notification. It has detected a virus named W32. Virut.CF. It seems that the virus has been replicated so many times in the chest itself. The notification keep popping and the total can reach to 80000+ notifications. 

 

Any help is appreciated

Comments 3 CommentsJump to latest comment

Mudit Kumar's picture

Are these notification from the same machine or from other machines also?

Also the Action shows that it has been Cleaned. Still if you come across infection check the following Removal Instructions

Web URL: http://www.symantec.com/security_response/writeup....

Thanks & Regards,
Mudit Kumar
 

Romeo123's picture

from other machines. This happens when a full scan is done. Notifications are ongoing even though the virus are deleted in the chest. 

VKalani's picture

The Notifications come from different computers all the time.  Means there were these detections happening all the time, on some  computer  or other.

You could apply an application control policy  for it, from you r SEPM server:

 

http://www.symantec.com/security_response/writeup.jsp?docid=2009-020411-2802-99

-VKalani

SOLUTION