cancel
Showing results for 
Search instead for 
Did you mean: 

: ! My Picutre.SCR Virus

Hi

Kindly check for the following file ! My Picutre.SCR which we doubt is a virus and isaffecting many systems in domain. If we try to delete it we getthe error.

3 Replies

Re: : ! My Picutre.SCR Virus

Hi lopaladhikari,

The screenshot is not displaying in your post, also it is unclear to me if this is the right forum for your post. Please check if thread https://community.mcafee.com/message/308198#308198 is relevant to you on this case.

Hope this helps.

exbrit
Level 21
Report Inappropriate Content
Message 3 of 4

Re: : ! My Picutre.SCR Virus

Moved to Corporate User Assistance in Malware Discussion as possibly a better spot.

Hayton
Level 18
Report Inappropriate Content
Message 4 of 4

Re: : ! My Picutre.SCR Virus

McAfee knows this as "Generic MSIL.m" but there are numerous variants listed in the threat database. Those variants have been added over a period of at least one year, perhaps longer, so McAfee should be able to deal with it unless you have encountered a new variant.

Taking one of the variants at random and checking the removal instructions I note that as well as disabling System Restore you are advised to clean up the MBR. See

http://www.mcafee.com/threat-intelligence/malware/default.aspx?id=2554943

VirusTotal has numerous entries for this, and there differences in the naming of the infection across those entries. Some are classed by Microsft, for instance, as a Trojan or alternatively as a worm; so obviously it would help McAfee if you could isolate the infected file(s) and submit them to McAfee for analysis.

See the following for more information -

http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Trojan%3AMSIL%2FBladabi...

http://tools.cisco.com/security/center/viewThreatOutbreakAlert.x?alertId=22506

http://www.symantec.com/security_response/writeup.jsp?docid=2013-070312-1617-99

http://about-threats.trendmicro.com/us/malware/TROJ_AGENT.SND

http://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~MSIL-HZ/detailed-...

http://www.drwebhk.com/en/virus_techinfo/Trojan.DownLoader6.63456.html