Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

CSP preventing execution of my .exe file?

Updated: 01 Jun 2010 | 2 comments
BLL's picture
0 0 Votes
Login to vote

I have compiled a Windows Batch File using Quick Batch File Compiler, creating an exe.
We have been using this exe on 5 wondows 20003 servers for the past 9 months without any issues.
Two Days ago someone in our security organtization installed Symantec CSP on 1 of the 5 servers and the .exe file stop working.

First Question:  Is Symantec CSP capable of blocking the running of this executable?
Second Question:  If so, How do I fix it so this program can run again? 

Comments

Naor Penso's picture
28
Nov
2009
0 Votes 0
Login to vote

Hey,

First question: Symantec CSP is indeed capable of blocking EXE files. what is the EXE/batch doing?
Second question: because CSP policy is complicated and i do not know which prevention policy you applied,
I would suggest entering the CSP management, and seeing the policies regarding the server you have problems with.
You will see an event in red (which suggest something was blocked). then you will open the event you will see exactly why the CSP agent killed the exe.
In order to make it work you will need to allow the exe to access the resource he needs, another option would be to give the exe safe/full priviliges and then he will be able to run.
Hope it helps,

Kind regards,
Naor Penso

For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.
Thanks :)

arikar's picture
29
Nov
2009
1 Vote +1
Login to vote

Hey,

1.Yes, SCSP is capable and will block exe and batch files when applying a prevention policy out of the box.
2.In order to fix the program to run again we need a bit more details (is it running with task scheduler, are you running it manually, is a third party application running it)?
3.You can go to the events under the "Monitors" page to try to find the error and then right clicking it to see what are the suggested solutions SCSP is giving you
(mind that it can be a multiple event: Task Scheduler running the batch which in turn runs a program that access a disk utility (for example).
4.Alternatively you can "Disable Prevention" if this is a critical process running on the system until you fix the problem.

Try to give a bit more information so the help can be more focused.

Regards