Endpoint Protection

hi all..


Please help me to get rid of this problem....
I hav Windows Vista installed on my laptop with 100 gb hardisk.

C:\Users\laptop\AppData\Local\Temp
Multiple number of temp files gets created in a min with a frequency of 5-6 files  per minute..with each of size approx 2 mb.This ultimately leads to eating up my disk space...and again and again low disk space alert pops-up..

I hav many times run disk cleanup,

Also i hav tried c-cleaner tool..to clean all the temporary files..
but its not worth!!! Problem persists..

Symnatec anti virus shows Trojan horse virus hav affected these .tmp files....!!
wat is the solution for this.??
Please help...
U can mail me personally: talk2vineetagarwal@gmail.com

Please refer to "The 5 Steps of Virus Troubleshooting" KB.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007011014341948

Good luck,
Thomas

Are they also residing in the following folders below?

c:/Documents and Settings/All Users/Application Data/Symantec/Symantec Endpoint Protection/xfer/*.tmp

We are also expericing this spamming our reports with fake positives...

You should check out the thread going on here too: https://www-secure.symantec.com/connect/forums/infected-bloodhoundexploit196

It has similar issues. Also if your problems are not fixed by a full scan in safemode with system restore off then your next steps should be to submit a sample to symantec. We can then issue a rapid release definition that you can download and apply. This should take care of the issue. Guides to do that are here:

Submitting Sample:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007031308253048

Applying Rapid Release Definition:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008052116163448


Hope this all works out.
Grant-

Dont want to do any wild guess could please attach a screen shot the it..

Are you using SAV then migrated to SEP?

1.Have you tried to check the schedule task, if there is an existing schedule that is not legitimate then delete it. then restart
2.goto run type msconfig then go to start up tab then disable all the entry. then reboot.
3. check the running process on the task manager if there is unnecessary process then end the process.

whats the "action" details that the symantec did??

Which Version you are using. MR4 & earlier has this problem.

Migrate to MR4.MP2. Your issuewill be resolved

 Try with this utility.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008060212522348

check c:\windows\temp folder for any temp files. If there, mention the name

Also go to VirusDefs folder and check if there are any temp files. If yes, manually update definitions once.

Have you try my procedure? what happen?

where is the thread owner :) ?

What is the latest on this issue? vineetagar you should update when you can. Try to let us know which solution helped.

try opening one of the content of the tmp file so we could have a hint on what application did it..