Endpoint Protection

 View Only
Expand all | Collapse all

Pen drive is becoming as shortcut

Migration User

Migration UserJun 05, 2013 04:20 AM

Chetan Savade

Chetan SavadeJun 12, 2013 07:38 AM

  • 1.  Pen drive is becoming as shortcut

    Posted Jun 05, 2013 04:12 AM

    Hi All

    We Have around 350 clients running with sep 12.1 and in some system if you are connecting pendrive pendrive it self is becoming as shortcut and folders will be there as it is inside if you open that shortcut.  how to resolve this issue please help me

     

    Note:Pen drive is becoming short cut not folders



  • 2.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 04:17 AM

    Kindly update the system with latest defintion and patches

    Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution

    Vulnerability

    Microsoft Security Bulletin MS10-046/ (KB2286198)

    http://www.securityfocus.com/bid/41732/solution

     

    Microsoft Windows Server Service RPC Handling Remote Code Execution

    Vulnerability

    Nortel Response to Microsoft Security Bulletin MS08-067/ (KB958644)

    http://www.securityfocus.com/bid/31874/solution

    *Edit*
    Duplicate thread
     


  • 3.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 04:19 AM

    check this thread

    https://www-secure.symantec.com/connect/forums/shortcut-virus-removal

    Also can you provide SNAP shot for shotcut virus.

    You can identify Virus file location (On Target)

    Please paste full Target Path.when you find this path virus file you can submit file in symantec.

    Shotcut.JPG

     

    Check this artical

    Eliminating viruses and security risks

    Article:HOWTO27280  |  Created: 2010-01-08  |  Updated: 2010-01-15  |  Article URL http://www.symantec.com/docs/HOWTO27280

     



  • 4.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 04:20 AM

    Hi technical_specialist

    Those are up to date

     



  • 5.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 04:26 AM

    analysis the file at "www.virustotal.com"

    Kindly submit it to symantec, may be it is different virus.

    http://www.symantec.com/security_response/submitsamples.jsp

    https://submit.symantec.com/websubmit/retail.cgi

    They can provide the rapid release defintion against this virus



  • 6.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 06:00 AM
      |   view attached

    Hi manish 

    Plese find folowing attachments 

    If you see the pen drive properties it will show you the following as target 

    system32\rundll32.exe _WNGDKTQYIC.nil,rundll32

    Attachment(s)

    rar
    New Folder_1.rar   1.04 MB 1 version


  • 7.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 06:14 AM

    Please enter full path

    system32\rundll32.exe _WNGDKTQYIC.nil,rundll32

    Also Provide Screen shot For machine

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run



  • 8.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 06:17 AM

    Have you submitted the file to symantec?

    Have you check the virus status at virus total?

    May be this virus is not detected by symantec so you can submit ti to symantec for analysis.



  • 9.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 07:37 AM

    Hi

    Can you please submit the shortcut file to Symantec Security response for analysing

    Regards

     



  • 10.  RE: Pen drive is becoming as shortcut

    Broadcom Employee
    Posted Jun 05, 2013 08:12 AM

    Hi,

    This is a duplicate thread created by you, Could you please provide reason for the same?

    https://www-secure.symantec.com/connect/forums/short-cut-virus#comment-8573761

     



  • 11.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 08:16 AM

    See here

    Eliminating viruses and security risks

    Article:HOWTO27280  |  Created: 2010-01-08  |  Updated: 2010-01-15  |  Article URL http://www.symantec.com/docs/HOWTO27280

     



  • 12.  RE: Pen drive is becoming as shortcut

    Trusted Advisor
    Posted Jun 05, 2013 08:23 AM

    Hello,

    Have you created a Case with Symantec Technical Support?? It is adviced to create a case.

    I would advise you to upload this suspicious file to the Symantec Security Response Team on - 

    https://submit.symantec.com/essential

    OR

    http://www.threatexpert.com

    Secondly in your case, it is advisable to follow few important steps:

    1) Make sure all these machines are Patched with ALL Latest MS security patches and service packs.

    2) Make sure the machines are installed with the Latest Symantec virus definitions.

    3) Disable the Autorun Feature on the machine.

    Preventing a virus from using the AutoRun feature to spread itself

    http://www.symantec.com/business/support/index?page=content&id=TECH104447

    Later, incase of suspicious activity still happening, then follow the steps provided in the Article below:

    Using Symantec Help (SymHelp) Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.

    Here's some advice from Security Response on how to make the best use of SEP.  Auto-Protect with traditional AV derfinitions alone is not enough for a complete defence against today's sophisticated threats: using IPS, Insight etc is crucial.  And, of course, educated users following best security practice... that';s the best protection.

    http://www.symantec.com/theme.jsp?themeid=stopping_malware&depthpath=0

    Hope that helps!!



  • 13.  RE: Pen drive is becoming as shortcut

    Posted Jun 05, 2013 11:38 AM

    in this case mostly exe file is exists in recycler folder which is hiddden.

    unhide it and submit the file to symantec.

    or else 

    open command prompt-->browse to removable folder-->run following command Attrib /s | findstr SHR.

    You will get a list running process. check for any .exe or .dll files running.

    and submit it to symantec 

     


  • 14.  RE: Pen drive is becoming as shortcut

    Posted Jun 06, 2013 01:02 AM

    Hi Chetan

    This is not a duplicate thread. in prvious case folders in side pen drive are becoming shortcut but in this case pendrive its self is becoming as shortcut and folders are remaining same ihave provided attachments also you can find out..

     

     

    Regards

    Vinod Kumar D



  • 15.  RE: Pen drive is becoming as shortcut

    Broadcom Employee
    Posted Jun 12, 2013 07:38 AM

    Hi,

    Could you please update this thread?



  • 16.  RE: Pen drive is becoming as shortcut

    Posted Sep 05, 2013 05:32 AM

    i am also finding out a solution for the problem below can any one.....

    Currently i am using Norton Internet security,2013 for my desktop PC but whenever i insert my pen drive to USB port all file containing in the pen drive got shortcuted. After uncheck the hidden folder option i have found the original file which was in hidden format & Corrupted also.

    Please help me



  • 17.  RE: Pen drive is becoming as shortcut

    Posted Sep 05, 2013 05:40 AM


  • 18.  RE: Pen drive is becoming as shortcut

    Posted Oct 18, 2013 01:28 PM

    Kindly update the current status of your issue on the forum, if it resolved then mark the comment as solution which help you.