Endpoint Protection

 View Only
Expand all | Collapse all

Virus in usb device

  • 1.  Virus in usb device

    Posted May 20, 2014 01:41 AM

    Virus in usb device. Try to clean it and scan with symantec but not be clean permanently.

    When unplug and plug it again

    virus.jpg

     

     



  • 2.  RE: Virus in usb device
    Best Answer

    Posted May 20, 2014 01:45 AM

    Check your antivirus is updated

    Check the below security patches are installed

    Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution

    Vulnerability

    Microsoft Security Bulletin MS10-046/ (KB2286198)

    http://www.securityfocus.com/bid/41732/solution

     

    Microsoft Windows Server Service RPC Handling Remote Code Execution

    Vulnerability

    Nortel Response to Microsoft Security Bulletin MS08-067/ (KB958644)

    http://www.securityfocus.com/bid/31874/solution

    Edit

    You can zip these files and submit to symantec

    https://submit.symantec.com/websubmit/platinum.cgi

    http://www.symantec.com/security_response/submitsamples.jsp



  • 3.  RE: Virus in usb device

    Posted May 20, 2014 02:38 AM

    Run a threat analysis scan from the symhelp tool

    How to run the Threat Analysis Scan in Symantec Help (SymHelp)

    Article:TECH215519  | Created: 2014-03-03  | Updated: 2014-03-07  | Article URL http://www.symantec.com/docs/TECH215519


  • 4.  RE: Virus in usb device



  • 5.  RE: Virus in usb device

    Posted May 20, 2014 04:40 AM

    Hi anandparikh,

    "Thumbs up" to the advice above.  This is a common way for W32.Silly.FDC and other threats to spread.

    Do be sure to submit the suspicious files found, and be sure that autorun is disabled throughout your organization!

    Here's an article that will help, once you have identified the suspicious files:

    Symantec Insider Tip: Successful Submissions!
    https://www-secure.symantec.com/connect/articles/symantec-insider-tip-successful-submissions

    Many thanks,

    Mick



  • 6.  RE: Virus in usb device

    Posted May 20, 2014 06:22 AM

    Have you tried just removing manually?

    Also, you can set an ADC policy to block files from running from USB devices.



  • 7.  RE: Virus in usb device

    Posted May 20, 2014 09:25 AM

    Are you sure the files on the usb device (or the entire volume) haven't been set to read-only?
     



  • 8.  RE: Virus in usb device

    Posted May 24, 2014 03:04 AM

    I have remove it manually but when reconnect it. It display again here.

    I have submit the files to symantec.

    Thanks all of you.



  • 9.  RE: Virus in usb device

    Posted May 25, 2014 10:33 AM

    Thanks for the update, anandparikh!

    Feel free to PM me the tracking number.  i will make sure everything is being processed correctly.

    All the best,

    Mick



  • 10.  RE: Virus in usb device
    Best Answer

    Posted May 26, 2014 05:08 AM

    Good news, anandparikh!

    Security Response have confirmed that definitions available now via LiveUpdate (Sequence number 154205 - "5/25/2014 rev. 20") will detect and remediate those files as Trojan.Gen.2 (for Thumbs.db) and Trojan.Gen (for RM (4GB).lnk).

    Please download these latest definitions and run a scan of the USB thumb drive.  Check the logs, afterward, to ensure that all files have been detected and a successful action carried out against them.

    Update this thread, after, with your results!  &: )

    Mick

     

     

     

     



  • 11.  RE: Virus in usb device

    Posted May 27, 2014 01:09 AM

    Today evening i update the defintion and will scan it.



  • 12.  RE: Virus in usb device

    Posted May 27, 2014 02:49 AM

    If there is a threat, I reecommend downloading and scanning straight away!  Also definitely scan any computers that this USB key has been in contact with.

     



  • 13.  RE: Virus in usb device

    Posted May 28, 2014 06:25 AM

    Hi anandparikh- just checking to see if that was effective?

    Many thanks,

    Mick



  • 14.  RE: Virus in usb device

    Posted May 30, 2014 07:21 AM

    Hi Mick - Thanks a lot, after update the definition virus clean.

    Thanks all for the co-operation.



  • 15.  RE: Virus in usb device

    Posted May 30, 2014 07:44 AM

    Excellent news!  Many thanks for the update, anandparikh!

    Here is an article I recommend to everybody who has just cleared away an infection....

    The Day After: Necessary Steps after a Virus Outbreak
    https://www-secure.symantec.com/connect/articles/day-after-necessary-steps-after-virus-outbreak

     

    Please do take measures to remain safe: there are many threats in circulation and the landscape is only ever growing more dangerous.

    All the best,

    Mick