• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

WS.Malware.2 Help needed!

Hello Norton Community, I am in need of some help.

First off, I use Symantec Endpoint Protection as my computer protection program. Yesterday I was browsing the internet for a program that could play .ogv files, and I found what I thought was a safe website to download one from. I was obviously wrong because right after I started the .exe file from the website my Symantec Endpoint Protection alerted me that it found two viruses. The two viruses found were Trojan.Gen.2 and WS.Malware.2. The Trojan.Gen.2 is said to be quarantined, but the WS.Malware.2 is said to be "Log only". After doing some research, I figured out that quarantined means the virus is stopped, so I am not worried about the Trojan.Gen.2 virus (I hope I am right). I am worried about the WS.Malware.2 because of how it was not quarantined or gotten rid of. So, what can I do to get rid of the WS.Malware.2 or get it quarantined? I have already ran several full scans using Symantec Endpoint Protection, but it always comes up clean. I also used the Norton Power Eraser, but it also came up clean. Is there anything I can do to get rid of it?

Please help!

Replies

Kudos0

Re: WS.Malware.2 Help needed!

Hello,
Just an FYI ~ You posted to the Norton Community / retail products.  Endpoint products are under Symantec Connect here
see http://www.symantec.com/security_response/writeup.jsp?docid=2011-040714-3811-99

WS.Malware.2 is a cloud based detection for files that are unclassified threats.

A file flagged by this detection name is deemed by Symantec to be an unclassified malicious threat and is therefore blocked from accessing the computer.
Not familiar with Endpoint products but, if you have a Resolved Security Risks in History you'll may find info re WS.Malware.2 flag there.
I suggest you resister at Symantec Endpoint Connect for this and or future help.
 

This thread is closed from further comment. Please visit the forum to start a new thread.