If a program tries to email itself or a copy of itself, it could be a worm trying to spread through email. A worm can send itself or send a copy of itself in an email message without any interaction with you.
Worm Blocking continually scans outgoing email attachments for worms. If it detects a worm, you receive an alert telling you that a malicious worm was found.
Worm Blocking alert appears only when you enable the Ask me what to do option under How to respond when an outbound threat is found in the Email Antivirus Scan window. If the Ask me what to do option is disabled Norton Internet Security automatically quarantines the detected worm and notifies you.
The alert presents you with options and asks you what to do. If you do not send an email message at that time, then it is probably a worm and you should quarantine the file.
- In the alert window, select the action that you want to take. Your options are:
QuarantinePermanently stops the worm by putting it in Security History. While in Security History, the worm is unable to spread. This Quarantine is the safest action. Allow Sends the email message for which you have received the worm blocking alert. If you allow the email message, it could infect the recipient's computer. Select this option if you are sure that the email is not infected with a worm. Ignore Ignores this risk.
- In the alert, in the drop-down list, click Quarantine.
- After the worm has been quarantined, perform the following tasks:
If nothing is detected, submit the infected file to Symantec Security Response. Also, indicate that the file was detected and that you have scanned it with the latest definition updates. Symantec Security Response replies to you within 48 hours.- Run LiveUpdate to ensure that you have the latest definition updates.
- Scan your computer.
- Run LiveUpdate to ensure that you have the latest definition updates.
0 comments: (+add yours?)
Post a Comment
Note: Only a member of this blog may post a comment.