Clampi

Appears to be back - previously discussed Here.

 

Since I never had a satisfactory response or discussion of any kind on Symantec's Enterprise website, I'm posting here.

 

It would appear that my clients on SEP are protected, it seems to be blocking and cleaning the malicious "uninstall.exe" and "2.exe" files.

 

My SAV10 clients, on the other hand, are getting infected faster than we can keep up with it.

 

Is Symantec ever going to truly address cleaning this as other vendors have?