W32.VIRUT.CONFLICKER

sbathina@silicon.in's picture

Hi all,

I installed symantec antivirus 10.1 in my clients managed from centralised server.

Recently w32.virut.conflicker virus infected in some systems

symantec is detecting this virus but instead of cleaning & quaruntine it is deleting the infected files but they are important application files.

please help in this issue

Thanks in advance.

Mithun Sanghavi's picture

Are you talking about??

Hello,

Are you talking about :

1) W32.Virut.A  - http://www.symantec.com/security_response/writeup.jsp?docid=2006-051402-1930-99

2) W32.Virut!html  - http://www.symantec.com/security_response/writeup.jsp?docid=2009-020418-0204-99

3) w32.Conficker - http://www.symantec.com/security_response/writeup.jsp?docid=2008-112203-2408-99

http://www.symantec.com/security_response/writeup.jsp?docid=2008-123015-3826-99

It seems you are mixing 2 threats, or you are confused with names...

In case, its a w32. Conficker, follow the Articles provided by Symantec:

Simple steps to protect yourself from the Conficker Worm
 

Best Practice for Downadup.B and Additional information on the same.

https://www-secure.symantec.com/connect/articles/best-practice-downadupb-and-additional-information-same

Thanks and Regards
-----------------------------------------------------
Mithun Sanghavi
Enterprise Product Support Analyst
Microsoft Certified Systems Administrator
Symantec Small Business Security Certified
Enterprise Technical Support
Sym

Vikram Kumar-SAV to SEP's picture

Virus is File Infector worm

Virus is File Infector worm which infects/Corrupts all the windows files or whatever files load into memory.
Would suggest you to change the Action in File System Auto-Protect to Quarantine and second action to Clean. 

sbathina@silicon.in's picture

Thankq Ill try it

Thankq Ill try it

Mithun Sanghavi's picture

Did the steps help you??

Hello,

Did the steps help you??

Since no reply from you, in so many days please REPLY to this.

Thanks and Regards
-----------------------------------------------------
Mithun Sanghavi
Enterprise Product Support Analyst
Microsoft Certified Systems Administrator
Symantec Small Business Security Certified
Enterprise Technical Support
Sym