I need a solution
For the last 2 weeks and roughly the same time every night, our Symantec Endpoint Protection on a server keeps quarantining a file. The name changes slightly but always starts with a dwhxxxx.exe. It is always found in the C:/Windows/Temp folder.
In checking my web logs, I cannot see where this file is coming in. Some nights we only get it a few times, other times we may have up to 20 or 30 files getting quarantined. Each day I run an full virus scan and we always come back clean. Any information in the Risk Details area does not indicate anything. Is here any information in this area that may help us in tracking down how this keeps getting into the system?
Any suggestions?
0