locked
worm:win32/hamweq!inf RRS feed

  • Question

  • Hi, I have a problem with the above mentioned virus. Forefront detects it and also "cleans" it, but not properly. I clean my flashdisk\thumbdrive but once I stick it back into my PC it gets reinfected. I have updated to today's definition file but it is no good. This particular virus cannot infect Vista machines, but it seriously attacks XP. I do not know what to do. Forefront picks it up over and over again and says it cleaned it succesfully but the virus just stays. I have disabled System Restore to no avail. Stinger from Mcafee also does'nt even detect it, but then again I have never seen it pick up anything before in my life. Please help as I was the one that pushed the client to get Forefront as I had faith in the product.
    Tuesday, March 3, 2009 5:24 PM

All replies

  • So no answers......guess MS has no clue about AV after all.
    Monday, March 9, 2009 6:40 AM
  • Either open a case with CSS Security directly to have it submitted or you can easily self-submit a piece of malware via http://www.microsoft.com/security/portal and the submit button that is there.  Make sure to mark you are an FCS customer there when you submit. Also explain what is happening.
    CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde
    Friday, March 13, 2009 7:00 PM
    Moderator
  • i have the same issue too
    Saturday, March 28, 2009 11:29 AM
  • After numerous e-mails back and forth, Microsoft finally listened to me and half and hour later they released a definition update that cleaned the virus. If only they would stop asking stupid questions and listened 2 weeks ago, it could have been fixed in a couple of hours. They seem to think that people out there are all idiots and ask stupid things like, have you updated to the latest version, are the latest updates installed, did you scan in safe mode, did you disable system restore. Since we are platinum partners with MS, they should surely no that we are not plebs, and should treat us accordingly. To ask these stupid questions is not only irritating, it also wastes time.....Come on MS....wake up!
    Wednesday, April 1, 2009 6:38 AM
  • In this case of Malware infection:

    1)make sure folder will show all hidden folder(including system files) in folder option

    2)submit suspect items to: https://www.microsoft.com/security/portal/Submission/Submit.aspx

    3)explain in detail what happen and where it locaed

    4)after submit save the refrence number

    5)contact support if it emergency and tell the refrence number of submission

    They will analyze and help you to remove it.

    Saturday, July 17, 2010 9:42 AM