1. Symantec/
  2. Security Response/
  3. Exp.CVE-2017-5754

Exp.CVE-2017-5754 - Removal

Risk Level 1: Very Low

Discovered:
January 11, 2018
Updated:
January 12, 2018 9:01:08 AM
Type:
Trojan
Infection Length:
Varies
Systems Affected:
Android, iOS, Linux, Mac, Windows
CVE References:
CVE-2017-5754
You may have arrived at this page either because you have been alerted by your Symantec product about this risk, or you are concerned that your computer has been affected by this risk.


Before proceeding further we recommend that you run a full system scan. If that does not resolve the problem you can try one of the options available below.


Windows
FOR NORTON USERS

If you are a Norton product user, we recommend you try the following resources to remove this risk.


Removal Tool

If you have an infected Windows system file, you may need to replace it using the Windows installation CD.


How to reduce the risk of infection
The following resources provide further information and best practices to help reduce the risk of infection.



FOR BUSINESS USERS
If you are a Symantec business product user, we recommend you try the following resources to remove this risk.


Identifying and submitting suspect files
Submitting suspicious files to Symantec allows us to ensure that our protection capabilities keep up with the ever-changing threat landscape. Submitted files are analyzed by Symantec Security Response and, where necessary, updated definitions are immediately distributed through LiveUpdate™ to all Symantec end points. This ensures that other computers nearby are protected from attack. The following resources may help in identifying suspicious files for submission to Symantec.


Removal Tool

If you have an infected Windows system file, you may need to replace it using the Windows installation CD.


How to reduce the risk of infection
The following resource provides further information and best practices to help reduce the risk of infection.
Protecting your business network



MANUAL REMOVAL
The following instructions pertain to all current Symantec antivirus products.


1. Performing a full system scan
How to run a full system scan using your Symantec product


2. Restoring settings in the registry
Many risks make modifications to the registry, which could impact the functionality or performance of the compromised computer. While many of these modifications can be restored through various Windows components, it may be necessary to edit the registry. See in the Technical Details of this writeup for information about which registry keys were created or modified. Delete registry subkeys and entries created by the risk and return all modified registry entries to their previous values.

Linux
The following instructions pertain to Symantec AntiVirus for Linux.
  1. Update the virus definitions.
  2. Run a full system scan.

1. To update the virus definitions
To obtain the most recent virus definitions run LiveUpdate. For Symantec AntiVirus for Linux, LiveUpdate definitions are updated regularly.

2. To run a full system scan
To run a full system scan in Linux, open a command line and type the following:

sav manualscan --scan /

If any files are detected, follow the instructions displayed by your antivirus program.

Mac
The following instructions pertain to all current and recent Symantec antivirus products for Mac.
  1. Update the virus definitions.
  2. Run a full system scan and repair or delete all the files detected.
For specific details on each of these steps, read the following instructions.

1. To update the virus definitions
To obtain the most recent virus definitions run LiveUpdate: These virus definitions are posted to the LiveUpdate servers regularly. To determine whether definitions for this threat are available by LiveUpdate, refer to the Virus Definitions (LiveUpdate).

2. To scan for and delete the infected files
  • Start your Norton AntiVirus or Symantec Endpoint Protection for Mac program and make sure that it is configured to scan all files.
  • Run a full system scan.
  • If any files are detected, click Repair (if available) or Delete.

Android
You may have arrived at this page either because you have been alerted by your Symantec product about this risk, or you are concerned that your device has been affected by this risk.


Install Norton Mobile Security
If you do not already have Norton Mobile Security installed on your device, please download the product from the Google Play Store.

Alternatively, you can navigate to the norton.mobi website from your device and download the product from there by completing the following steps:

  1. Select the 90-Day free download.
  2. Select the Android icon to begin downloading the product.
  3. Select Install in order to accept the permissions that are being requested by the program.
  4. Next, select Open and then Agree & Launch.

Note: The first time the product runs, you will be required to enter a code that is displayed on the screen in order to activate the product. Enter the provided code and select Submit.


Run a full system scan
Run a full system scan using Norton Mobile Security to remove this risk from the device. To do this, please perform the following actions:
  1. Navigate to the Anti-Malware tab.
  2. Select Scan Now.


Manual removal
To remove this risk manually, please perform the following actions:
  1. Open the Google Android Menu.
  2. Go to the Settings icon and select Applications.
  3. Next, select Manage.
  4. Select the application and select Uninstall.

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube