Solved

Trojan Horse DWH####.tmp w/Symantec Corp 10.2.0.298

Posted on 2009-04-06
5
9,846 Views
Last Modified: 2013-11-22
I am running Symantec Corp 10.2.0.298 with updated signatures.  I'm getting multiple notifications a day, the filename is always DWH####.tmp and always with a count of 2.  The action taken by the my AV is to quarantine.  Does anyone know what is Trojan is or know of a removal tool?  Thanks
0
Comment
Question by:markswelch
5 Comments
 
LVL 29

Expert Comment

by:QPR
ID: 24076012
0
 
LVL 15

Accepted Solution

by:
xmachine earned 50 total points
ID: 24076051
Hi,

1) Check the following KB article:

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/5acc619d5a30571b882573980069a3cd?OpenDocument

2) Download & run CCleaner to clean junk temp files

http://www.ccleaner.com/download

3) Download & run "Symantec Intelligent Updater" to update and overwrite any corrupted definitions

http://definitions.symantec.com/defs/20090405-003-i32.exe

Or visit this link and choose the correct antivirus software version

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce


A Symantec Certified Specialist @ your service
0
 
LVL 2

Author Closing Comment

by:markswelch
ID: 31566961
Great response.  Thanks!
0
 

Expert Comment

by:EternalMycah
ID: 24273117
NOTE: for people trying the steps in this solution, please make sure that in CCleaner's advanced options that you UNCHECK the box "Only delete files in Windows Temp folders older than 48 hours".  Otherwise you will keep the last couple of days worth of temp files in that folder.

Sorry, but this didn't work for me.  I have been dealing with this problem showing up intermittently for over a year now on several different user's machines.  Unfortunately, it is hard to test if any "solution" (none have worked for me still) has worked or not because I have to wait until the next day until the problem pops back up.

Although I did the steps recommended in the solution yesterday, I had CCleaner's default setting to leave the last 48 hours of temp files.  So, I'll have to wait until tomorrow to see if it works by changing that setting.

However, I "THINK" the real problem is that the quarantined files are still sitting there and getting rescanned each time.  So, in addition to running CCleaner set to delete all temp files I deleted all the files listed in quarantine.  SAV > View > Quarantine.

System: Vist SP1, SAV 10.2
0
 

Expert Comment

by:EternalMycah
ID: 24306545
I got this taken care of FINALLY!!!

The key here is to delete all the files listed in quarantine.  SAV > View > Quarantine

Otherwise, everytime you get new virus definitions, you will continue having this problem.  Since by default, SAV rescans your Quarantine folder after receiving new definitions.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Virus or Ransom ware 6 388
Has this user really been infected by Ransomware? 3 139
Can we get infected by copying & pasting 6 184
How do I determine the virus in this email? 5 113
12 Steps to a more secure Internet experience (http://tekblog.teksquisite.com/) Everyone who is a licensed driver initially had to pass a driving test that consisted of taking:    1. a written test    2. a road test    3. a vision test Le…
Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question