Advanced Threat Protection

 View Only
  • 1.  DWH.exe inserts viruses on my Computer?

    Posted Feb 04, 2018 06:07 AM

    Hello everyone, I am new to this forums and I decided to ask for help here.

    Over the past few days I have been getting virus detections by Symantec that there's multiple files with the first three letters "DWH" and then there's 4 numbers and letters in the end (Ex. DWH17fd.exe)
    Not only that, but there's also other file names like "APQDD86.tmp" and my computer keeps saying that there's more of them. This happens not only once,  but more than 3 times per day and it just slows down my computer whenever I'm using it or I'm playing games.

    Here is a screenshot of my quarantine folder -- https://puu.sh/zgnB5/e0d3880ee4.png

    Also, i tried going into Safe mode to delete the "DWH.exe" from the Program Data folder in the  symantec folder in C: Drive. It somehow managed to be back there earlier this morning and now I can't find the said file in safe mode. I'm assuming there's a virus in my computer  now.

    Help me please :(



  • 2.  RE: DWH.exe inserts viruses on my Computer?

    Posted Feb 04, 2018 08:14 PM

    Known issue/false positive. See the 'Solution' section here:

    http://www.symantec.com/docs/TECH102953



  • 3.  RE: DWH.exe inserts viruses on my Computer?

    Posted Feb 09, 2018 01:16 PM

    Hello, Thank you for your reply on my problem.. I have checked the thread but I can't seem to find the virus and spyware policy thing in my antivirus... I might have an older version or a different version of the antivirus.

    Here is how my symantec antivirus looks like - https://puu.sh/zk9xg/a5ebdbcdc3.png



  • 4.  RE: DWH.exe inserts viruses on my Computer?

    Posted Feb 09, 2018 02:19 PM

    You're running an unmanaged client. Need to start at 'View Quarantine'



  • 5.  RE: DWH.exe inserts viruses on my Computer?

    Posted Feb 10, 2018 09:54 PM

    Hello again, I'm really confused about the given solution thread. I can't seem to find these options panel:
    "

    1. Open the Virus and Spyware policy > Windows Settings > Quarantine > Advanced Options
    2. Under "When New Virus Definitions Arrive" select Do nothing.
      In Symantec Endpoint Protection 11.0 versions, this policy is called Antivirus and Antispyware Protection and Quarantine will be under General.
    3. Click OK and, if needed, assign the policy. "

    I am currently on the "View quarantine" part of the antivirus. Thank you

    View quarantine pic - https://puu.sh/zl89E/67181377a1.png

    PS - sorry for my bad english. It's not really my first language



  • 6.  RE: DWH.exe inserts viruses on my Computer?

    Posted Feb 11, 2018 08:46 AM

    Again, it's because you're running the unmanaged client so the steps in the article are different. You need to delete your quarantine

    Start with 'Deleting DWH files' in the link and go from there