Products
Applications
Support
Company
How To Buy
Skip to main content (Press Enter).
Sign in
Skip auxiliary navigation (Press Enter).
Register
Skip main navigation (Press Enter).
Toggle navigation
Search Options
Home
My Communities
Communities
All Communities
Enterprise Software
Mainframe Software
Symantec Enterprise
Blogs
All Blogs
Enterprise Software
Mainframe Software
Symantec Enterprise
Events
All Events
Enterprise Software
Mainframe Software
Symantec Enterprise
VMware
Water Cooler
Groups
Enterprise Software
Mainframe Software
Symantec Enterprise
Members
Endpoint Protection
View Only
Community Home
Threads
Library
Events
Members
Back to discussions
Expand all
|
Collapse all
sort by most recent
sort by thread
Need Help urgently from symantec tech support
Jump to
Best Answer
Migration User
Dec 29, 2009 08:09 AM
Hi A new threat is spreading in our network making pcs very slow and network connectivity very poor. ...
Migration User
Dec 29, 2009 08:20 AM
I have checked for the tracking number mentioned by you. The investigation is still under progress. ...
Migration User
Dec 29, 2009 08:25 AM
need to speed up the process. our network is suffering due to this. other av products are detecting ...
Migration User
Dec 29, 2009 02:01 PM
Greetings Bijay.Swain, Unfortunately I do not have the ability to process these submissions faster ...
Migration User
Dec 29, 2009 02:42 PM
Off hand was NTP enabled, with IPS running? Just curious more than anything.. Beyond that, call ...
Migration User
Dec 29, 2009 03:14 PM
As an FYI, if the issue has a serious impact to your business' daily functions you can advise the agent ...
Migration User
Dec 29, 2009 03:43 PM
I would agree. BTW, web cases are not really intended for urgent issues such as a virus outbreak.
Migration User
Dec 29, 2009 10:42 PM
Hi john support case no is 410-671-180. now can you help me?
Migration User
Dec 29, 2009 10:57 PM
The submssion that you have made is still open. If you really need immdeiate help please contact ...
Migration User
Dec 29, 2009 11:10 PM
While this isn't helpful in cleaning up the infection, its always good to have a reminder that SEP is ...
Migration User
Dec 30, 2009 10:34 AM
I got the closing mail for the tracking no #14353568 which says withe the latest rapid release Sequence ...
Migration User
Dec 30, 2009 10:37 AM
Ok I got the ftp link.
Migration User
Dec 30, 2009 10:48 AM
Greetings Bijay.Swain, Please keep us posted on this!
Migration User
Dec 30, 2009 11:32 AM
i got the ftp site . but the update for that sequence no is not there. folder is blank.
Migration User
Dec 30, 2009 11:50 AM
Greetings, It takes anywhere from 30-60 minutes from the time you get the closing email til the definitions ...
Migration User
Dec 30, 2009 10:49 PM
Did you end up getting the rapid release bijay? If so did it catch the virus? Grant-
Migration User
Dec 30, 2009 10:56 PM
Best Answer
Yes I got the rapid release and it caught the virus. thanks to symantec for quick response as they took ...
1.
Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 08:09 AM
Reply
Reply Privately
Options Dropdown
Hi
A new threat is spreading in our network making pcs very slow and network connectivity very poor. This has infected almost each pc in our network.
I have submited the file and the
Tracking #14353568 . also created a case in mysupport page case no is
410-671-180
but need to speedup the solution process.
tried to block the file from running through apps and device controll policy but clients are having problem through this as their explorer.exe closes and starts automatically again and again and as a result their desktop comes and goes out frequently.
Any one from symantec can help me quickly.
2.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 08:20 AM
Reply
Reply Privately
Options Dropdown
I have checked for the tracking number mentioned by you. The investigation is still under progress. I have made a note of the tracking number and will keep you updated.
3.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 08:25 AM
Reply
Reply Privately
Options Dropdown
need to speed up the process. our network is suffering due to this. other av products are detecting this threat. and this has become an issue in our company.
4.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 02:01 PM
Reply
Reply Privately
Options Dropdown
Greetings Bijay.Swain,
Unfortunately I do not have the ability to process these submissions faster without you opening a support case with Symantec. If you want to do that we can get the submission bumped.
Alternatively, if you use Network Threat Protection in your environment you can block the file from being ran using the MD5 hash:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009041514273648?Open&seg=ent
Go straight to the section "Configuring the Policy". The MD5 hash to use for this is:
6fb7df8aaa4e3e410503b73a9d476aba
I checked into the threat and it appears it may be spreading via Autorun. I would suggest checking into disabling Autorun network wide to limit the spread of threats:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008032111570648?Open&seg=ent
5.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 02:42 PM
Reply
Reply Privately
Options Dropdown
Off hand was NTP enabled, with IPS running? Just curious more than anything..
Beyond that, call into Symantec support, immediately ask for a "Duty Manager." Explain the situation, and he/she will escalate.
6.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 03:14 PM
Reply
Reply Privately
Options Dropdown
As an FYI, if the issue has a serious impact to your business' daily functions you can advise the agent the severity is "Severity 1 (Emergency Up)". These cases take priority and will get an agent on the line typically faster than a Duty Manager can arrange a callback for you.
7.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 03:43 PM
Reply
Reply Privately
Options Dropdown
I would agree. BTW, web cases are not really intended for urgent issues such as a virus outbreak.
8.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 10:42 PM
Reply
Reply Privately
Options Dropdown
Hi john
support case no is
410-671-180. now can you help me?
9.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 10:57 PM
Reply
Reply Privately
Options Dropdown
The submssion that you have made is still open.
If you really need immdeiate help please contact support.
10.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 29, 2009 11:10 PM
Reply
Reply Privately
Options Dropdown
While this isn't helpful in cleaning up the infection, its always good to have a reminder that SEP is only part of the solution for keeping malware off your machines.
Several other things that can reduce your risk of infection or reduce the impact if something does get in:
Limit the use of admin rights
Use perimeter defenses
Educate users on malware/security
Watch the network for signs of infection to cut-off infected systems
Use software restriction policies or Application and Device Control in SEP to only allow pre-approved software to run.
Keep your machines up-to-date with software and patches
11.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 30, 2009 10:34 AM
Reply
Reply Privately
Options Dropdown
I got the closing mail for the tracking no #14353568 which says withe the latest rapid release Sequence Number: 104859 (or higher) will detect the threat as Imaut.cn .
I downloaded the latest rapid release and updated my client but it doesn't detect the threat.
when i checked my seq no it syas as 104855 . i am unable to get the 104859 rapid release . can anyone send the link.
12.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 30, 2009 10:37 AM
Reply
Reply Privately
Options Dropdown
Ok I got the ftp link.
13.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 30, 2009 10:48 AM
Reply
Reply Privately
Options Dropdown
Greetings Bijay.Swain,
Please keep us posted on this!
14.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 30, 2009 11:32 AM
Reply
Reply Privately
Options Dropdown
i got the ftp site . but the update for that sequence no is not there. folder is blank.
15.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 30, 2009 11:50 AM
Reply
Reply Privately
Options Dropdown
Greetings,
It takes anywhere from 30-60 minutes from the time you get the closing email til the definitions are available.
Keep an eye on the following site, you should see revision 104859 or later populate shortly.
ftp://ftp.symantec.com/AVDEFS/symantec_antivirus_corp/rapidrelease/sequence/
16.
RE: Need Help urgently from symantec tech support
0
Recommend
Migration User
Posted Dec 30, 2009 10:49 PM
Reply
Reply Privately
Options Dropdown
Did you end up getting the rapid release bijay? If so did it catch the virus?
Grant-
17.
RE: Need Help urgently from symantec tech support
Best Answer
0
Recommend
Migration User
Posted Dec 30, 2009 10:56 PM
Reply
Reply Privately
Options Dropdown
Yes I got the rapid release and it caught the virus. thanks to symantec for quick response as they took only 1 day to provide the rapid release . Pcs in our network were gone too slow as this threat was creating a file/folder of 4.12 MB in each folder of a drive which was taking whole disk space making the pc unusuable.
I am Happy with symantecs effort for this.
×
New Best Answer
This thread already has a best answer. Would you like to mark this message as the new best answer?
Copyright 2019. All rights reserved.
Powered by Higher Logic