Endpoint Protection

 View Only

  • 1.  AFFECTED BY Packed.Generic.258

    Posted Oct 22, 2009 05:47 AM
      |   view attached

    EVERYDAY WE HAVE GOT Packed.Generic.258 TROJAN AND DELETED. LASTDAY I HAVE CHECKED THE STATUS THROUGH CONSOLE NO RISKS ARE FOUND BUT IN "TOP SOURCES OF ATTACK"  DETECTS ONE OF MACHINES IN OUR LAN AND "NUMBER OF ATTACKS" GRADUALLY INCREASED.I HAVE GOT A CASE ID BUT STILL NOW WE DON'T GET ANY SOLUTION.CAN ANYBODY HELP ME OUT.

    SOUMYA GHOSH

    NETWORK EXECUTIVE

    SHRIRAM INSIGHT SHARE BROKERS LIMITED



  • 2.  RE: AFFECTED BY Packed.Generic.258

    Posted Oct 22, 2009 07:57 AM
    You will need to fuind the machines that are being shown as infected or as the source of attack in your network.

    You can use the risk tracer technology to find that out. Use the following KB:

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/be1edccb0e39927280257363003a2bb3?OpenDocument

    I think you need to identify and isolate the machines that are being shown as the source of the infection. Please follow this important KB article: http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/59ced4261979d3e78825725f007bfde5?OpenDocument

    Best,
    Aniket



  • 3.  RE: AFFECTED BY Packed.Generic.258

    Posted Oct 22, 2009 09:44 AM
    The top sources of attack might not correlate to the Packed.Generic.258 detection.  Check the NTP logs to see if that IP shows up with other issues.