Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Bloodhound.Exploit.196 appears again

Updated: 21 May 2010 | 3 comments
anikoleva's picture
0 0 Votes
Login to vote

Hi,
I have a problem with Bloodhound.Exploit.196. I am running Windows Vista Enterprise and I have Symantec Corporate Antivirus v10.2 installed.  My antivirus continually finds the Bloodhound.Exploit.196 virus which filename's usually looks something like this "DWH****.tmp" and is located in my temp folder for my user profile.  
I followed instructions for removal: securityresponse.symantec.com/security_response/writeup.jsp but the virus appears again and again and I am receiving hundreds of symantec auto-protect messages per day.
Any idea how to get rid of this virus?

discussion Filed Under:

Comments

Frank019's picture
20
Aug
2009
0 Votes 0
Login to vote

You might want to submit the

You might want to submit the file to Symantec at https://submit.symantec.com/gold /basic /essential /bcs depending on your support contract.

Thomas K's picture
20
Aug
2009
0 Votes 0
Login to vote

See The 5 Steps of Virus

See

The 5 Steps of Virus Troubleshooting - http://service1.symantec.com/SUPPORT/ent-security....
 

Common loading points for viruses, worms, and Trojan horse programs on Windows NT/2000/XP/2003 -
http://service1.symantec.com/SUPPORT/ent-security....

I hope this is helpful,
Thomas

David-Z's picture
20
Aug
2009
1 Vote +1
Login to vote

Sounds like a product issue

Sounds like a product issue instead of a threat. Check out this doc:

Title: 'When new virus definitions are in place and the quarantine is being scanned, a DWHxxx.tmp file is created and detected by Auto-Protect'
Document ID: 2007111911135548
> Web URL: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111911135548?Open&seg=ent

It can be cleaned up fairly quickly, my suggestion would be to open up a case with technical support so someone can help you out.

http://www.symantec.com/enterprise/support/contact_techsupp_static.jsp

-or-

https://mysupport.symantec.com/

Hope that helps!