Symantec Endpoint Protection shows up with an alternative Icon in Task Manager.
Article ID: 262297
Updated On:
Products
Issue/Introduction
The following icon represents an alternative process associated with Symantec Endpoint Protection. It can be observed in the Task Manager when Symantec-related processes or services are running.
Environment
SEP 14.3 +
Cause
The DWHWizrd.exe process serves as an alternative icon, functioning as a DefWatch helper within the SEP client. It is triggered when new antivirus definitions are received.
This process re-scans items in the quarantine section to determine if they can be repaired or restored using the updated definitions.
Resolution
To confirm the DWHWizrd.exe process is running, you can inspect its command line arguments. This can typically be done through system monitoring tools like Task Manager (on Windows) or other process management software. When the DWHWizrd.exe process is active, its command line details will show, confirming that it's performing its functions, such as re-scanning quarantined items with new antivirus definitions.
Feedback
