Endpoint Protection

 View Only

  • 1.  para-virtualization OS hangs with SPBBCDrv enabled

    Posted Jun 10, 2009 10:37 PM
    Hi

    I am developing windows pv driver based on Xen. Our Virtual System is Windows Server2003 SP2, and Symantec Antivirus version is 10.1.8.8000. We use Microsoft ISCSI Initiator to setup ISCSI interface, and make a full building of VC++ project on this ISCSI disk. The problem is the OS always hangs at random after we started building work. But after we disabled Symantec tamper protection filter driver - SPBBCDrv from the register table, the hanging issue disppear. Details is setting Start value to 4 in HKLM\System|CurrentControlSet\Services\SPBBCDrv, and then reboot the VM.

    I come to here for help about whether SPBBCDrv causes the deadlock of system or not? I am not the only person who hit problem about SPBBCDrv, following is a link with similar problem of SPBBCDrv.
    http://forums.citrix.com/thread.jspa?threadID=245085&tstart=0

    Any help is appreciated.

    Thanks
    Annie.


  • 2.  RE: para-virtualization OS hangs with SPBBCDrv enabled

    Posted Jun 10, 2009 11:59 PM
    Tamper Protection does cause deadlock if many environments..like sometimes when you have app. on the server and clients install and use it on their local system Tamper protection creates deadlock.
    Back also fails due to this.
    As thi driver prevents damage to Symantec releated files and reg entries..it also creates problem for other programs.
    It is safe to disable it.


  • 3.  RE: para-virtualization OS hangs with SPBBCDrv enabled

    Posted Jun 11, 2009 01:25 AM

    Thanks for you reply.

    But Tamper Protection  is enabled by default after Symantec Antivirus is installed. It is OK for me to change the register setting, but it will be a problem for customers who use our driver. We can change the register kay during our driver installation, or document about this. Is there a hotfix for this problem? or a newer version available with a fix on this?



  • 4.  RE: para-virtualization OS hangs with SPBBCDrv enabled

    Posted Jun 11, 2009 03:03 AM
    I dont think so there would be a Hotfix for it..
    As you can try one of the two thing
    1. Exclusions for Tamper Protion
    2. Disable it from SSC or SAV GUI

    Read this to get a better idea on tamper protection for SAv 10.x

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005033111081548?Open&src=ent_gold_nam&docid=2005050310252848&nsf=ent-security.nsf&view=docid


  • 5.  RE: para-virtualization OS hangs with SPBBCDrv enabled

    Posted Jun 11, 2009 03:03 AM
    I dont think so there would be a Hotfix for it..
    As you can try one of the two thing
    1. Exclusions for Tamper Protion
    2. Disable it from SSC or SAV GUI

    Read this to get a better idea on tamper protection for SAv 10.x

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005033111081548?Open&src=ent_gold_nam&docid=2005050310252848&nsf=ent-security.nsf&view=docid