Hello, We get this message rtvscan.exe SZmodName:icdcnl.dll SZmodver:2010.10.28.0
Offset:0000713a suddenly on around 350 workstations on our company.
Our version is 11.0.5002.333
What can we do to solve this problem?
Please help!
BR /Hasan
We need more info about your environment.
What version of SEP are you running? Make sure you are running the latest (11.0.6100.645).
What is the OS?
The file icdcnl.dll looks suspicious
Is it located in %windir%\incops3
Might be a infection problem..Run a full scan with Norton Power Eraser once on a signle affected machine
http://security.symantec.com/nbrt/npe.asp?lcid=1033
If it is a threat submit the file to symantec security response
What is happening when you see this message: are you installing SEP? Opening the UI? Running LiveUpdate? We need more information about your situation: SEP version, OS, etc.
[edit: there is a bit more info included than when I first saw this post; thanks for editing to include the SEP version. Definitely recommend updating to RU6a then RU6 MP1.]
sandra
Thanks for your support!
We are running Windows XP I get this message from our security program INCOPS3 but i have already put it on submit the folder or "ignore" .
What should i do?
Upgrade
Where can i find the installationfiles?
Do you think that is the solution?
BR /Hasan IT
Hello is this the correct installation file Symantec_Endpoint_Protection_11.0.6A_Xplat_EN_DVD
Upgrade from 11.0.5002 ?
hasayr,
Yes, that is correct.
Thanks Brian
and this must be the update file Symantec_Endpoint_Protection_11.0.6_MP1_Xplat_EN_DVD? BR/Hasayr
Yes, that is RU6 MP1. The very latest version.
In order to upgrade to RU6 MP1, you must first upgrade from RU6 or RU6a. A direct upgrade to RU6 MP1 is not supported on clients 11.0.5 and lower.