Endpoint Protection

 View Only
  • 1.  Executable file change denial and consequences

    Posted Apr 24, 2016 12:03 PM

    Hi - after a reboot (Windows 7, 64bit, Symantec Endpoint v12.1) I received an Endpoint message that, to the best of my recollection, was asking for permission for an "excecutable file change."  This was for the "explorer.exe" file located in  C:\Windows\

    I have often received this message and usually allow the request.  This one time that I denied it, the consequence seemed to be an alteration in the scrolling behavior of my Logitech M510 mouse, which now scrolls upward normally in all applications (different web browswers, etc) but now does not downard scroll.  Trying to fix this within the "mouse" options of the Control Panel fails. 

    I realize that this must be some software issue with the mouse, but the fact is that this happened immediately after clicking NO to the symantec endpoint request.  I simply cannot solve the issue via software (driver updates, reinstall, etc) nor with the Control Panel options.

    My questions:
    (1) Has anyone seen this sort of behavior before, specifically with the above mentioned request being denied?
    (2) Suppose I want to backtrack and actually *allow* the request instead of having denied it?  Can I?  I'd like to test whether this is actually the culprit, and to do that I'd have to get that message again, which isn't easily reproduced since I'm not sure why it appeared in the first place.

    Much thanks,

    Jim



  • 2.  RE: Executable file change denial and consequences

    Posted Apr 25, 2016 10:57 AM

    Haven't seen this behaviour before but in this case it should block the application, at least per Symantec's definition of what it should do:

    Blocking networked applications that might be under attack

    Can you reboot the PC and force an update of the software?