Endpoint Protection

  • Private Community
 View Only
Back to discussions
Expand all | Collapse all

SEP detected C:\Users\username\AppData\Local\Temp has virus

Migration User

Migration UserMay 26, 2014 03:57 AM

What's the virus name has been detected ?
Migration User

Migration UserMay 28, 2014 05:44 AM

 Hi James Please see attached screenshot. Thanks
Migration User

Migration UserMay 29, 2014 09:10 PM

we are using SEPM 11.0

  • 1.  SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 08, 2014 01:51 AM

    Hello,

    One of our user Windows 7 PC always detected C:\Users\username\AppData\Local\Temp has virus, so the pop-up Windows often appear, how can I exculde this path ?

    Thanks



  • 2.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 08, 2014 02:04 AM

    Does SEP detect Generic Trojan - DWH*.tmp virus ?

    DWH***.tmp files are detected in the user profile temp directory.

    Article:TECH92399 | Created: 2009-01-16 | Updated: 2012-04-27 | Article URL http://www.symantec.com/docs/TECH92399



  • 3.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 08, 2014 02:35 AM

    Run the Threat Analysis Scan

    How to run the Threat Analysis Scan in Symantec Help (SymHelp)

    http://www.symantec.com/docs/TECH215519

    Is your system infected? Symantec tools to help clear an infection

    https://www-secure.symantec.com/connect/forums/your-system-infected-symantec-tools-help-clear-infection



  • 4.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 08, 2014 04:28 AM

    Hi leiw,

    I recommend strongly against excluding that path.  That is a likely location for threats to reside.

    I do recommend checking to see whether these are actual, current infections or if you are encountering a known issue.  What are the file names that are being detected there?

    Many thanks,

    Mick



  • 5.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 08, 2014 08:12 AM

    Verify this is a false postive before you start exlcuding as this is a dangerous location...

    What's the virus name and infected file?



  • 6.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 13, 2014 06:48 AM

    Hi again,

    Just a ping to see if you were able to resolve this issue?  The thread is still marked "needs solution."

    With thanks and best regards,

    Mick

     



  • 7.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 23, 2014 02:38 AM

    Hi all,

    I have run the Threat Analysis Scan that is no virus infected, and I already do the following action but can't fix:

    Can someone tell me how to exclude this path ?

    Thanks



  • 8.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 23, 2014 03:06 PM

    Have you tried just deleting the items in quarantine?



  • 9.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 26, 2014 03:51 AM

    Hi Brian,

    I tried to delete them already, still cannt fix.

    Thanks



  • 10.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 26, 2014 03:57 AM

    What's the virus name has been detected ?



  • 11.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 28, 2014 05:44 AM
      |   view attached

    Hi James

    Please see attached screenshot.

    Thanks



  • 12.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 28, 2014 05:55 AM

    What exact SEPM version are you using ?

    See mithun comments

    http://www.symantec.com/connect/forums/unable-fully-remove-trojangen2-sep



  • 13.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 28, 2014 08:24 AM

    See here to remove:

    When new virus definitions are in place and the quarantine is being scanned, a DWH file is created and detected by Auto-Protect

    http://www.symantec.com/docs/TECH102953



  • 14.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 29, 2014 09:10 PM

    we are using SEPM 11.0



  • 15.  RE: SEP detected C:\Users\username\AppData\Local\Temp has virus

    Posted May 30, 2014 01:10 AM

    What is the SEPM 11.x version?

    This issue is fixed in 11.0 RU7 MP2, if your version is earlier then upgrade the SEPM in latest version.

    SEPM latest version 12.1 RU4 MP1A.

    DWH***.tmp files are detected in the user profile temp directory.

    Article:TECH92399  |  Created: 2009-01-16  |  Updated: 2012-04-27  |  Article URL http://www.symantec.com/docs/TECH92399

     

    Upgrading or migrating to Symantec Endpoint Protection 12.1.4 (RU4)/12.1.4a (RU4a)

    Article:TECH211821  |  Created: 2013-10-23  |  Updated: 2014-02-24  |  Article URL http://www.symantec.com/docs/TECH211821