Team,

In my office many system are having symantec Endpoint 12.1 installed, and we are facing a virus issues alert ?

can anyone here please let me know how to delete it quick way

Hi,

tmp file (DWH*****.tmp) detected as Trojan.Gen or Trojan.Gen.2 by Corp products

http://www.symantec.com/business/support/index?page=content&id=TECH102953

https://www-secure.symantec.com/connect/forums/dwh-files-quantine

http://www.symantec.com/business/support/index?page=content&id=TECH102953&profileURL=https%3A%2F%2Fsymaccount-profile.symantec.com%2FSSO%2Findex.jsp%3FssoID%3D14089659089481DNk7912lhFGCY9qgp8KX1f49D7jAjlfMFrxR

This is a known issue with SEP. Upgrade to the latest version, you can also delete the quarantine. See here:

When new virus definitions are in place and the quarantine is being scanned, a DWH file is created and detected by Auto-Protect

http://www.symantec.com/docs/TECH102953

Run the symhelp tool to clean it.

How to run the Threat Analysis Scan in Symantec Help (SymHelp)

What is your SEPM version?

Dear Sir,

SEPM VERSION IS 12.1

hi bisht,

check with my above post, even i was facing this issue last week and i have resolved the issue with above article.

It's a known issue, see here for the steps to remediate:

When new virus definitions are in place and the quarantine is being scanned, a DWH file is created and detected by Auto-Protect

http://www.symantec.com/docs/TECH102953

You should upgrade to the latest version of SEPM & SEP clients.

SEPM 12.1 RU4 MP1b is the latest version. Latest version will patch detected vulnerablities.