Endpoint Protection

 View Only
  • 1.  Continued scanning

    Posted Jan 27, 2014 02:29 PM

    Everytime I start my computer Symantec Endpoint starts scanning.  It finds hundreds of Trojan.Gen risks.  I can't use my computer because it just continues to scan.  How to I get my computer back??  I have tried Norton Power Eraser as well, but can't get rid of the virus. Version 4.0.0.57  Help!



  • 2.  RE: Continued scanning

    Posted Jan 27, 2014 02:30 PM

    What is the name of the risk and what is the location? Is it similar to dwhxxx.tmp?

    If so, you need to manually remove

    When new virus definitions are in place and the quarantine is being scanned, a DWH file is created and detected by Auto-Protect

    Article:TECH102953  |  Created: 2007-01-19  |  Updated: 2013-04-22  |  Article URL http://www.symantec.com/docs/TECH102953

     

    also, what version of SEP is this happening on?



  • 3.  RE: Continued scanning

    Posted Jan 27, 2014 02:35 PM

    Trojan.Gen

    It says it's in quarentine: C:Documents and Settings\All Users\Applications Data\Symantec



  • 4.  RE: Continued scanning

    Posted Jan 27, 2014 02:36 PM

    Sorry, can't find the version

     



  • 5.  RE: Continued scanning

    Posted Jan 27, 2014 02:38 PM

    Yup, this is known issue in the product. Follow the article I linked above on how to remove



  • 6.  RE: Continued scanning

    Posted Jan 27, 2014 02:48 PM

    Using version 11.0.4000,2295

     



  • 7.  RE: Continued scanning

    Posted Jan 27, 2014 03:00 PM

    Very old version, the steps in the link should still apply though



  • 8.  RE: Continued scanning

    Posted Jan 28, 2014 04:16 AM

    Agreed with Brian, it's known issue fixed on more recent version (from 11.0 RU7 MP2 and any later versions). I would highly recommend you to upgrade your SEP version.

    Kind regards,

    A. Wesker

     



  • 9.  RE: Continued scanning

    Trusted Advisor
    Posted Jan 28, 2014 04:21 AM

    Even in the latest versions of SEP you still get this issues but there have be various fixes since 11 RU5 to reduce the ammount of DWHXXX.tmp files (false posatives) detected. 

    But Brians steps will help reduce what your seeing in your current version.