Solved

Trojan Horse DWH####.tmp w/Symantec Corp 10.2.0.298

Posted on 2009-04-06
5
9,830 Views
Last Modified: 2013-11-22
I am running Symantec Corp 10.2.0.298 with updated signatures.  I'm getting multiple notifications a day, the filename is always DWH####.tmp and always with a count of 2.  The action taken by the my AV is to quarantine.  Does anyone know what is Trojan is or know of a removal tool?  Thanks
0
Comment
Question by:markswelch
5 Comments
 
LVL 29

Expert Comment

by:QPR
Comment Utility
0
 
LVL 15

Accepted Solution

by:
xmachine earned 50 total points
Comment Utility
Hi,

1) Check the following KB article:

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/5acc619d5a30571b882573980069a3cd?OpenDocument

2) Download & run CCleaner to clean junk temp files

http://www.ccleaner.com/download

3) Download & run "Symantec Intelligent Updater" to update and overwrite any corrupted definitions

http://definitions.symantec.com/defs/20090405-003-i32.exe

Or visit this link and choose the correct antivirus software version

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce


A Symantec Certified Specialist @ your service
0
 
LVL 2

Author Closing Comment

by:markswelch
Comment Utility
Great response.  Thanks!
0
 

Expert Comment

by:EternalMycah
Comment Utility
NOTE: for people trying the steps in this solution, please make sure that in CCleaner's advanced options that you UNCHECK the box "Only delete files in Windows Temp folders older than 48 hours".  Otherwise you will keep the last couple of days worth of temp files in that folder.

Sorry, but this didn't work for me.  I have been dealing with this problem showing up intermittently for over a year now on several different user's machines.  Unfortunately, it is hard to test if any "solution" (none have worked for me still) has worked or not because I have to wait until the next day until the problem pops back up.

Although I did the steps recommended in the solution yesterday, I had CCleaner's default setting to leave the last 48 hours of temp files.  So, I'll have to wait until tomorrow to see if it works by changing that setting.

However, I "THINK" the real problem is that the quarantined files are still sitting there and getting rescanned each time.  So, in addition to running CCleaner set to delete all temp files I deleted all the files listed in quarantine.  SAV > View > Quarantine.

System: Vist SP1, SAV 10.2
0
 

Expert Comment

by:EternalMycah
Comment Utility
I got this taken care of FINALLY!!!

The key here is to delete all the files listed in quarantine.  SAV > View > Quarantine

Otherwise, everytime you get new virus definitions, you will continue having this problem.  Since by default, SAV rescans your Quarantine folder after receiving new definitions.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

PREFACE The purpose of this guide is to explain what the SEPC Status Utility is and how it works. I have written the utility using AutoIt and have included the source code for your review. You are welcome to modify the code to your liking, but I wi…
HOW TO REMOTELY CLEAN MEROND.O WITH ESET SILENTLY PROBLEM       If you have the fortunate luck to contract the Merond.O virus on your network, it can be quite troublesome to remove as it propagates to network shares on your network. In my case, the …
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now