Video Screencast Help
Search Video Help Close Back
to help

ntpdc.exe in quarantine

Created: 18 Mar 2013 | Updated: 18 Mar 2013 | 5 comments
sulig's picture
0 0 Votes
Login to vote

Hi,

 

Last time(about 2 weeks) in various servers in localization : "C:\program files (x86)\NTP\bin\" or "c:\program files\ntp\bin\"

SEP "catch" file ntpdc.exe in Quarantine

In our enviroment NTP was install and configured long time ago

What happend that last time SEP "catch" that file?

 

Regards

SULIG

Operating Systems:

Comments 5 CommentsJump to latest comment

Brian81's picture

This is not related to Sep. Different directory. What program is this? You can submit as false positive.

0
Login to vote
sulig's picture

This program is NTP stanard client(Meinberg). Now I submit file(submission pending)

0
Login to vote
Brian81's picture

Submit here:

https://submit.symantec.com/false_positive/

Open a support case with Symantec and have it escalated.

0
Login to vote
Mithun Sanghavi's picture

Hello,

Detection of Network Time Protocol (NTP) seems to be a False Positive. It is recommended to submit this file on:

https://submit.symantec.com/false_positive/

and

Check these Articles below:

Best Practice when Symantec Endpoint Protection or Symantec AntiVirus is Detecting a File that is Believed to be Safe

http://www.symantec.com/docs/TECH98360

Restoring a false positive file detection from the Symantec Endpoint Protection quarantine

http://www.symantec.com/docs/TECH150607

False Positive Prevention and Correction for Symantec Endpoint Protection Version 12.1

https://www-secure.symantec.com/connect/downloads/false-positive-prevention-and-correction-symantec-endpoint-protection-version-121

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote
sulig's picture

Thanks for quick answer

I submit this file on:

https://submit.symantec.com/false_positive/

0
Login to vote