Download the filemonnt software for file operation monitoring.
Point the monitoring target to the temp directory and monitor create to find the file that generated the TMP virus. Finally, we found that ProgramThe file is: dwhwizrd.exe. This program file is the Norton Upgrade Wizard !!!
Speechless ....
It's no wonder that I deleted Norton today. When I reinstalled it again, I found that the status is always waiting for updates. The page LiveUpdate prompts that all products are up-to-date and depressing.
Analyze the process:
1. Even set Norton to automatically update every day around.
2. LiveUpdate downloads the Update file as required, and generates the temporary file dwh *. tmp to store the file in the temporary directory.
3.real-time monitoring program rtvscan.exe directly clears the dwh *. tmp virus definition file generated by LiveUpdate.
4. The program cannot be updated.
5. A large number of viruses occur at every day.
Occasionally used version: Norton Enterprise Edition Sep 11.0.780.1109