Video Screencast Help

Access violation when running a self extracting executable

Created: 24 Jun 2010 | 1 comment

I have ran into a problem where an immediate access violation occurs when attempting to run a self extracting executable that was generated using WinRar 3.7. This problem has been reproduced on three Windows 7 32 bit PCs that are running Symantec Endpoint version 11.0.5 with definitions from 5/24 or later. If Endpoint is uninstalled or an earlier version of the definitions are used (mid February) on the same systems, the problem no longer occurs.

Also if the packages are rebuilt using the exact same content with WinRar 3.9, the probem no longer occurs. I can see slight differences between the embedded manifests, but nothing stands out as a potential problem.

I have extensively searched these forums and the web and have not uncovered any clues about what may be triggering this problem. Has anyone seen similar issues or have a guess as to what could be the cause? Any help would be greatly apprciated.

Comments 1 CommentJump to latest comment

AravindKM's picture

It may be false positiveness.Refer this KB
Best Practice when Symantec Endpoint Protection or Symantec AntiVirus is Detecting a File that is Believed to be Safe

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind