Endpoint Protection

Hi

Since the latest virus definition updates have been pushed down , the anti virus on every one of my users pc's (200+ of them) has come up
with a security risk with regard to Dameware. My admin workstation even went as far as having the dameware installation rendered unusable
as the Symantec removed files during its scan / cleaning process.

The Dameware Remote tool is an admin function that we use every day that is being broken by Symantec AV. I fully understand that this could
pose a potential risk if it is on somebody's computer who doesnt want it there but this is our corporate remote support solution that is being
rendered unusable because of Symantec.

How do we fix this issue?

Thanks
Rob.

Please submit a "False Positive" to Security Response ASAP.

https://submit.symantec.com/dispute/false_positive/

Another user is seeing this as well.

https://www-secure.symantec.com/connect/forums/sep-detects-dameware-development-dwrcst-wrongly-virus-bloodhoundsonar1

Thomas

 If it is getting detected then that means the latest defs have false positives with Dameware.
For the moment you can symantec revert to a previous definition of the virus definitions from SEPM -Policies-Liveupdate plicy- Content updates-select a older revision.

You can call support to know what is the status of this issue and whether the next available definitions will stop detecting dameware.

This started after the latest definition release (about 5:15 pm GMT today ). All my users are getting Dameware flagged as a security risk. Please resolve soon!

 you can make a Security risk exception for Remacc.Dwremote

From Centralised exceptions- Security risk Exceptions- Known Risks -

Security Response is aware of the many detections of Remacc.Dwremote.
A new definition will be released sometime soon.

Regards,
Thomas

FYI I'm pretty sure I saw an out of cycle virus definition get released a couple of hours ago.  That may have addressed the issue

thanks