Endpoint Protection

 View Only

  • 1.  Event ID 45 Tamper Protection Alert Business Objects

    Posted Mar 20, 2012 02:34 PM

    We do not use Tamper Protection it is disabled.

    I am getting a continous alert after an exclusion has been put into place already for this. I phoned support and was told the exclusion needed quotations so I entertained and yet still have the same issue. I am getting no where with support and need to make this go away. Any suggestions?

     

    This occurs on Windows 2003 server.

    SEP 12.1

    Event Type: Error
    Event Source: Symantec AntiVirus
    Event Category: None
    Event ID: 45
     

    User: Username

    Computer: SERVERNAME

    Description:


    SYMANTEC TAMPER PROTECTION ALERT

    Target: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Bin\Smc.exe
    Event Info: Open Process
    ActionTaken: Logged
    Actor Process: C:\PROGRAM FILES\BUSINESS OBJECTS\BUSINESSOBJECTS ENTERPRISE 6\BIN\BOMGR.EXE (PID 13484)
     

    Please let me know if you have had this issue. We only use the antivirus and antispyware portions of SEP.

     



  • 2.  RE: Event ID 45 Tamper Protection Alert Business Objects

    Posted Mar 20, 2012 03:35 PM

    Well, there are a few things.  Nothing is actually going on here, as it is only "logging" the event. 

    I understand you created an exception, but when you created said exception (with or without quoatation marks) - did you change the setting to "ignore" rather than "log"?

    Second, because many will point it out, you should probably install 12.1 RU1.  You are still using the original build of 12.1

     

    Cheers.



  • 3.  RE: Event ID 45 Tamper Protection Alert Business Objects

    Posted Mar 20, 2012 05:26 PM

    I had seen  this issue in SEP 11 with caused by Tamper Protection.

    Workaround:
    To resolve this issue, disable Symantec Tamper Protection:
    1. Perform the following:
    On a server installation: Right-click a server or server group, and then click All Tasks > Symantec AntiVirus > Server Tamper Protection Options.
    2. Uncheck Enable tamper protection.
    3. Attempt to run the EV Process again, if issue persists, uninstall and then reinstall Symantec AntiVirus.

     

    http://www.symantec.com/business/support/index?page=content&id=TECH128441



  • 4.  RE: Event ID 45 Tamper Protection Alert Business Objects

    Posted Mar 20, 2012 05:29 PM

    You can also Create an exception for tamper protection..

    http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/c291bf8d5d97b5f68025736200576f9d?OpenDocument



  • 5.  RE: Event ID 45 Tamper Protection Alert Business Objects

    Posted Mar 21, 2012 10:10 AM

    I have created the exception already but thanks.



  • 6.  RE: Event ID 45 Tamper Protection Alert Business Objects

    Posted Mar 21, 2012 10:11 AM

    I will check and see I believe it is set to log however the events are piling up in the event log. With an exception being in place it should be excluding this rather than logging anything.



  • 7.  RE: Event ID 45 Tamper Protection Alert Business Objects

    Posted Mar 21, 2012 10:15 AM

    I right clicked on the server group and there was not an "All tasks" setting. Can you please let me know the one you are referring to?



  • 8.  RE: Event ID 45 Tamper Protection Alert Business Objects

    Posted Mar 21, 2012 01:09 PM

    I was referring to this

    http://www.symantec.com/business/support/index?page=content&id=TECH128441