Endpoint Protection

 View Only
  • 1.  W32.Pilleuz

    Posted Jan 25, 2011 08:24 PM

    Someone gave me a stick drive.  I loaded it in my computer.  All these warning came up lighting up the computer like Timesquare.  I ran several scans and when I look at the Protection logs > Risk Log, I see the below listed:

    file name: APW295.tmp   Risk: W32.Pilleuz  Action:  Cleaned by deletion

    Hate to sound stupid, but I'm old, is my computer okay?  Is it gone?   There are 2 other followinig listings that say in Action: Log Only.

    Please help.  



  • 2.  RE: W32.Pilleuz

    Posted Jan 25, 2011 08:33 PM

    Can you post the other listings or at least a screen shot?

    If they are still on the USB drive, I would format it immediately.

    I would also make sure your virus defs are fully up to date and run a full scan in safemode to ensure everything is clean.



  • 3.  RE: W32.Pilleuz

    Posted Jan 26, 2011 12:32 AM

    Here's the Security Response writeup. This thing does not mess around--and it spreads by USB (stick) drives.

    http://www.symantec.com/security_response/writeup.jsp?docid=2009-093006-0442-99

    Hope all of the Times Square lights were Auto-Protect preventing this threat from being written to your machine. I hope you give the heads up to the person that gave you this stick that their machine is probably compromised.  I'd recommend going straight for the Rapid Release definitions (v5i32 for a 32-bit computer running SEP) and scanning in Safe Mode.

    http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=rr

    sandra



  • 4.  RE: W32.Pilleuz

    Posted Jan 26, 2011 12:52 AM

    Yes, because the action is  cleaned  by  deletion, the risk seems to have been taken care  of.