locked
Forefront Client Security detected virus but cannot remove. RRS feed

  • Question

  • What should I do?  I selected to remove it, it says that action was successfull and comes back again telling me that I have a virus.

    It is Trojan:Win32/Bamital.E

    Any ideas what to do?  Should I use different kind of antivirus?

    Thank you.

    Thursday, April 29, 2010 1:11 PM

Answers

  • Is it a new reinfection? Or do you believe it's just the same files we aren't removing?  If you could get a sample of the file/files and submit them at http://www.microsoft.com/security/portal


    CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde
    Thursday, April 29, 2010 1:39 PM

All replies

  • Is it a new reinfection? Or do you believe it's just the same files we aren't removing?  If you could get a sample of the file/files and submit them at http://www.microsoft.com/security/portal


    CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde
    Thursday, April 29, 2010 1:39 PM
  • Hello Igor,

    Please try to look in the client's History and see if it's at least the same file from the same location.

    If yes, try to "catch" the file and send it to Microsoft Engineers via the Security Portal Kurt Falde also mentioned.

     

    Many thanks!

    Victor

    • Proposed as answer by Victor Homocea Thursday, April 29, 2010 7:06 PM
    Thursday, April 29, 2010 6:15 PM
  • It is the same virus.  The same location.  I checked it.

    This is the same virus.  It tells me that it was deleted and about 15 seconds later new message popping up telling me that there is a virus.

    Friday, April 30, 2010 12:40 PM
  • Igor,

    I think that you should call Microsoft to ask for support in this moment, it seems to be quite annoying and have a hidden module not seen by FCS.

     

    Regards,

    Victor


    Please "Vote me as Helpful" if i did helped you in any way.
    Monday, May 3, 2010 6:28 AM
  • I had the same problem next mounth, but it was other virus. This issues occured in some computers , but in other, FCS worked normally.

    I resolved this problem installing other Anti-Virus... Pay attention if this problems occures in other computers or servers in your enviroment, because in my case it occures.

     

    Regards,

     

    Wilson

    MCSA + MCITP Server Administrator


    Wilson Nadim www.tecnicowilson.com
    Wednesday, May 5, 2010 1:36 PM
  • Hello Brother......

    Did You Check the History Events for Client Security detections virus......

    Some times...the Virus will stuck in sector area of Hard Disk or Rutor Config.....

    I Know that this software is good but you need also anthere Software.....Like Any Anti-Virus Softwares......

    Good Luck

    Tuesday, May 11, 2010 12:23 PM