Endpoint Protection

 View Only

  • 1.  W32. Virut. CF

    Posted Sep 17, 2010 10:32 AM
      |   view attached

    Dear all,

    Attached is a notification. It has detected a virus named W32. Virut.CF. It seems that the virus has been replicated so many times in the chest itself. The notification keep popping and the total can reach to 80000+ notifications. 

     

    Any help is appreciated



  • 2.  RE: W32. Virut. CF

    Posted Sep 17, 2010 11:06 AM

    Are these notification from the same machine or from other machines also?

    Also the Action shows that it has been Cleaned. Still if you come across infection check the following Removal Instructions

    Web URL: http://www.symantec.com/security_response/writeup.jsp?docid=2009-020411-2802-99&tabid=3



  • 3.  RE: W32. Virut. CF

    Posted Sep 17, 2010 11:23 AM

    from other machines. This happens when a full scan is done. Notifications are ongoing even though the virus are deleted in the chest. 



  • 4.  RE: W32. Virut. CF
    Best Answer

    Posted Sep 17, 2010 12:06 PM

    The Notifications come from different computers all the time.  Means there were these detections happening all the time, on some  computer  or other.

    You could apply an application control policy  for it, from you r SEPM server:

     

    http://www.symantec.com/security_response/writeup.jsp?docid=2009-020411-2802-99