Endpoint Version 12.1.1000.157 RU1
Windows 7, Home Premium
I am lookin at the "Symantec Endpoint Protection Detection Results" screen. Every 10 -15 seconds a file pops up:
APQ***.tmp - (the last 3 are always different), the action is Pending Analysis and the location is in the Symantec Quarantine folder.
This is always followed within one to four files saying Quarantined. Some of those follow-on files begin with APQ and are in the Symantec Quarantine folder. Most begin with DWH and are located in a users\app data\local\temp folder. All of these files are labeled as Trojan Horses.
Each of these files appear within seconds of each other on the "Symantec Endpoint Protection Detection Results". What puzzles me is that while these files are constantly appearing on this screen, I also have the Symantec Endpoint Protection Status screen open which only says "Your computer is protected. No problems detected." Meanwhile, every few seconds another line appears with a Trojan Horse on the detection results screen.
MEANWHILE - Microsoft Security Essentials is continually finding Trojan:Win32/Medfos.A every 10 minutes. It is immediately removed and then comes back in about 10 minutes.
A couple weeks ago the same thing was happening. I ran the Symantec NFE tool but no luck. A little research led me to malwaretips.com. I followed their instructions and ran a process involving multiple downloads and files and finally got it to stop. But now it is back and I have no idea why.
I don't have a clue on which way to turn and would appreciate any help. Thanks in advance for reading this and I hope you can help.