Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

W32.VIRUT.CONFLICKER

Updated: 21 May 2010 | 5 comments
Subrahmanyam's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Hi all,

I installed symantec antivirus 10.1 in my clients managed from centralised server.

Recently w32.virut.conflicker virus infected in some systems

symantec is detecting this virus but instead of cleaning & quaruntine it is deleting the infected files but they are important application files.

please help in this issue

Thanks in advance.

Comments

Mithun Sanghavi's picture
09
Nov
2009
0 Votes 0
Login to vote

Are you talking about??

Hello,

Are you talking about :

1) W32.Virut.A  - http://www.symantec.com/security_response/writeup.jsp?docid=2006-051402-1930-99

2) W32.Virut!html  - http://www.symantec.com/security_response/writeup.jsp?docid=2009-020418-0204-99

3) w32.Conficker - http://www.symantec.com/security_response/writeup.jsp?docid=2008-112203-2408-99

http://www.symantec.com/security_response/writeup.jsp?docid=2008-123015-3826-99

It seems you are mixing 2 threats, or you are confused with names...

In case, its a w32. Conficker, follow the Articles provided by Symantec:

Simple steps to protect yourself from the Conficker Worm
 

Best Practice for Downadup.B and Additional information on the same.

https://www-secure.symantec.com/connect/articles/best-practice-downadupb-and-additional-information-same

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

Vikram Kumar-SAV to SEP's picture
09
Nov
2009
0 Votes 0
Login to vote

Virus is File Infector worm

Virus is File Infector worm which infects/Corrupts all the windows files or whatever files load into memory.
Would suggest you to change the Action in File System Auto-Protect to Quarantine and second action to Clean. 

Subrahmanyam's picture
10
Nov
2009
0 Votes 0
Login to vote

Thankq Ill try it

Thankq Ill try it

Mithun Sanghavi's picture
10
Nov
2009
0 Votes 0
Login to vote

Did the steps help you??

Hello,

Did the steps help you??

Since no reply from you, in so many days please REPLY to this.

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

Subrahmanyam's picture
23
Nov
2009
0 Votes 0
Login to vote

ya changed the file system

ya changed the file system auto protect from delete to quarantine it worked

Thanks a lot