Services..

[Migration User]

Hi,

 Any idea about this service..C:\WINDOWS\system32\RemoteGetMacIDService.exe,is it malicious one ?

[Migration User]

Hi,

I think you should submit this file to the Security Response team. If it is malicious file, definitions will be created for it.

However, if you want to delete this file yourself, you can use the autoruns tool from windows and do that.

Go to services in that tool and right click on the service you are looking for. There you have the option to delete a service.

Aniket

[Migration User]

Please submitt the file to symantec security response

 

 

The Symantec Security Response sample submission process'

 

 http://service1.symantec.com/support/ent-security.nsf/docid/199822105339?Open&seg=ent

Security Best Practice Recommendations

 

 http://service1.symantec.com/support/ent-security.nsf/docid/2009010808340848?Open&seg=ent

 

 

 'The 5 Steps of Virus Troubleshooting'

 

http://service1.symantec.com/support/ent-security.nsf/docid/2007011014341948?Open&seg=ent

 

 

 

 

 

[Migration User]

thz for your reply..i have submitted to symantec for anaysis..

[Mick2009]

Hi Subhi,

Many thanks for submitting the suspicious file!  Security Response will examine it fully in due course.

Until Security Response's analysis is available, there are a coupe of things that can be done: 

The file can also be submitted to threatexpert.com.  That can generate an automated write-up, which may let you know about some specifics of what a suspicious file is trying to do.

If you are confident that the file is malicious and wish to block its spread through your network, creating a policy with SEP's Application and Device Control can help.  How to use Application and Device Control to limit the spread of a threat.

Thanks and best regards,

Mick

[Migration User]

Many thanks Mick..