Symantec Scan Engine deletes clean exe files such as the adobe flash player installer

Article:TECH178323  |  Created: 2012-01-05  |  Updated: 2012-05-15  |  Article URL
Article Type
Technical Solution



Symantec Scan Engine deletes clean exeutable files such as the adobe flash player installer installation file.


A container violation has been found
Date/time of event = 2011-10-26 10:23:19 Event Severity Level = Warning URL =
File name = install_flashplayer11x32ax_gtbd_aih.exe
File status = BLOCKED
Component name = install_flashplayer11x32ax_gtbd_aih.exe
Component disposition = DELETED


Symantec Scan Engine 5.2.x


Some executables are encrypted and by default Scan Engine deletes encrypted containers.


To resolve the issue follow these steps:
1. In the Scan Engine console Uncheck/Disable "Delete encrypted containers" in Policies - Filtering - Container Handling
2. Click on Save using the floppy disk icon in the top left
3. Go into services.msc and restart the Symantec Scan Engine service


Article URL

Terms of use for this information are found in Legal Notices