Endpoint Protection

 View Only

  • 1.  How do I configure an exception for Tamper protection

    Posted Oct 22, 2008 09:56 AM

    Hi.

     

    I am getting the errors in my event log where tamper protection is having an issue with UPHClean:

     

    SYMANTEC TAMPER PROTECTION ALERT

    Target: C:\Program Files\Symantec AntiVirus\Rtvscan.exe

    Event Info: Suspend Thread

    Action Taken: Blocked

    Actor Process: D:\Program Files\UPHClean\uphclean.exe

     

    I have found plenty of suggestions to add UPHClean as an exception to the tamper protection, but I can't find anyplace to configure exceptions to the tamper protection.

     

    The computer in question is a Windows 2003 terminal server running Syamntec Antivirus 10.1.0.394, and is managed.

     

    Thank you,

     

    Mark



  • 2.  RE: How do I configure an exception for Tamper protection

    Posted Jan 20, 2009 07:02 PM

    I am having the same issue in our environment and was wondering the exact same thing. I don't want to turn tamper protection off, but this seems to be the only option as I can't find where to create an exception rule for this uphclean.exe process.

     

    Any tips?



  • 3.  RE: How do I configure an exception for Tamper protection

    Posted Feb 11, 2009 11:48 AM

    Unfortunately there is no way in SAV to modify what tamper protection does to single processes, but in SEP you can, so change to that if it's possible. Of course then you will get a bunch of new problems :D

     

    - Jukka