Endpoint Protection

 View Only

  • 1.  DWH Trojan.Malscript!html Problem

    Posted Feb 19, 2010 01:31 AM

    I got alot of DWH files like DWH65A.tmp in windows\temp on a server, we got sep 11.0.5002.333 and alot DWH files is in quarantine but if I manage to delete all DWH files
    they coming back really soon and groving to many hundred DWH files in windows\temp
    A full scan have ben run and moved alot to quarantine, but they are coming back.
    3.jpg
     
    2.jpg
    4.jpg
    5.jpg

    Files on c:\windows\temp  (hundreds of them)

    1.jpg




  • 2.  RE: DWH Trojan.Malscript!html Problem

    Posted Feb 19, 2010 01:39 AM
    Pls go through this article
    Antivirus software and the illusion of protection. 

    Whether this was an upgrade form an earlier version to RU5.If yes try by reinstalling the SEP client...


  • 3.  RE: DWH Trojan.Malscript!html Problem

    Posted Feb 19, 2010 02:19 AM
    Great article
    Before we had CA eTrust on this server, we installed sep 11.0.5002.333  and then uninstalled eTrust
    so its possible that we had the problem before sep installation, but is there a antivirus way to solve the problem
    or shall I reinstall the server


  • 4.  RE: DWH Trojan.Malscript!html Problem

    Posted Feb 19, 2010 02:21 AM
    try by scanning that server in safemode.. 


  • 5.  RE: DWH Trojan.Malscript!html Problem
    Best Answer

    Posted Feb 19, 2010 04:56 AM
    The "action" in your screenshot is "left alone."  Auto-protect is not always capable of remediating files that certain threats have "tricked" Windows into defending.

    Please perform a full system scan in safe mode, which almost always is able to act on these files!

    Thanks and best regards,

    Mick