Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

ntpdc.exe in quarantine

Created: 18 Mar 2013 • Updated: 18 Mar 2013 | 5 comments

Hi,

Last time(about 2 weeks) in various servers in localization : "C:\program files (x86)\NTP\bin\" or "c:\program files\ntp\bin\"

SEP "catch" file ntpdc.exe in Quarantine

In our enviroment NTP was install and configured long time ago

What happend that last time SEP "catch" that file?

Regards

SULIG

Operating Systems:

Comments 5 CommentsJump to latest comment

.Brian's picture

This is not related to Sep. Different directory. What program is this? You can submit as false positive.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

sulig's picture

This program is NTP stanard client(Meinberg). Now I submit file(submission pending)

.Brian's picture

Submit here:

https://submit.symantec.com/false_positive/

Open a support case with Symantec and have it escalated.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

Detection of Network Time Protocol (NTP) seems to be a False Positive. It is recommended to submit this file on:

https://submit.symantec.com/false_positive/

and

Check these Articles below:

Best Practice when Symantec Endpoint Protection or Symantec AntiVirus is Detecting a File that is Believed to be Safe

http://www.symantec.com/docs/TECH98360

Restoring a false positive file detection from the Symantec Endpoint Protection quarantine

http://www.symantec.com/docs/TECH150607

False Positive Prevention and Correction for Symantec Endpoint Protection Version 12.1

https://www-secure.symantec.com/connect/downloads/false-positive-prevention-and-correction-symantec-endpoint-protection-version-121

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.