Analysis on Norton's frequent removal of dwh *. tmp Virus

Source: Internet
Author: User

Download the filemonnt software for file operation monitoring.
Point the monitoring target to the temp directory and monitor create to find the file that generated the TMP virus. Finally, we found that ProgramThe file is: dwhwizrd.exe. This program file is the Norton Upgrade Wizard !!!

Speechless ....

It's no wonder that I deleted Norton today. When I reinstalled it again, I found that the status is always waiting for updates. The page LiveUpdate prompts that all products are up-to-date and depressing.

Analyze the process:
1. Even set Norton to automatically update every day around.
2. LiveUpdate downloads the Update file as required, and generates the temporary file dwh *. tmp to store the file in the temporary directory.
3.real-time monitoring program rtvscan.exe directly clears the dwh *. tmp virus definition file generated by LiveUpdate.
4. The program cannot be updated.
5. A large number of viruses occur at every day.

Occasionally used version: Norton Enterprise Edition Sep 11.0.780.1109

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.