Defwatch.DWH SEP 12.1 RU5

I thought this false posative issue detecting defwatch,dwh was fixed in 12.1 RU2? 

We are seeing this on 12.1 RU5 machine detecting these defwatch false posative in the symantec location 

C:\ProgramData\Symantec\DefWatch.DWH\dwh****.doc

These are still appearing in the still infected machines