Defwatch.tmp files?? Infected or quarantined??

Created: 08 Feb 2013 | Updated: 08 Feb 2013 | 3 comments

ThaveshinP Partner Accredited

This issue has been solved. See solution.

Hi All, SEPM picking up files under programdata\symantec\ as infected. Does anyone know what defwatch.tmp files are ?? Are they infected quarantined files or not . SEP 11ru7 Windows XP. What steps should I take?

Discussion Filed Under:

Security, Endpoint Protection (AntiVirus) - 11.x, Endpoint Protection (AntiVirus), Agents, Basics, Best Practice, Features, Monitoring, Reporting, Rules, Tip/How to, Troubleshooting

Group Ownership:

PartnerNet Group

Show Less

Comments RSS Feed

Comments 3 Comments • Jump to latest comment

Ashish-Sharma Partner

Defwatch.tmp files?? Infected or quarantined?? - Comment:08 Feb 2013 : Link

HI,

This known issue you can upgrade your sepm.

Check this artical

DWH***.tmp files are detected in the user profile temp directory.

Article:TECH92399

Created: 2009-01-16

Updated: 2012-04-27

Article URL http://www.symantec.com/docs/TECH92399

Files re-detected during Defwatch scan
Fix ID: 2067778
Symptom: DWHxxxx.tmp files are being re-detected when Defwatch scan is running.
Solution: Fixed some scan issues, making the scan faster. Also created a separate folder to rescan Quarantine items that can be used to create exceptions

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents

SOLUTION