Hello,
This is a known issue with the older versions of Symantec Endpoint Protection version 11.x
Incase, if you are carrying an older version of SEP, it would be adviced to install the Latest version of SEP 11.0.7101 OR Migrate to the SEP 12.1.1000
Check this:
DWH***.tmp files are detected in the user profile temp directory
http://www.symantec.com/docs/TECH92399
When new virus definitions are in place and the quarantine is being scanned, a DWH file is created and detected by Auto-Protect
http://www.symantec.com/docs/TECH102953
AND
Create a policy as suggested below:
- Open Symantec Endpoint Protection Manager (SEPM)
- Select Policies
- Select Antivirus and Antispyware Policy
- Select Quarantine
- Click on the Cleanup Tab
- Under Quarantined Files check mark "Delete oldest file to limit folder Size at ( X ) MB (Instead of X mentioned the Size of Quarantine Folder normally selected.)
If you have frequent recurrences of this issue and would like to disable re-scanning of the quarantine folder please follow these steps:
Disable re-scanning of quarantine files.
From the SEP-Manager:
- Edit the Antivirus and Antispyware policy of affected clients.
- In the policy editor click "Quarantine" on the left-hand menu.
- On the general tab click "Do nothing" under the heading "When new Virus Definitions Arrive"
Also, to remove the DWxxxxxx.tmp, follow the steps as provided in the Article below:
https://www-secure.symantec.com/connect/articles/issue-related-low-disk-space
Hope that helps!!