Endpoint Protection

 View Only
  • 1.  SEP and An unauthorized change to windows

    Posted Jul 20, 2015 02:38 PM

    Our server team has started seeing the below error and wanted me to check if there is anything we can do on the SEP side.  Apparently they found some articles stating that AV was removing things from the trusted store.  So if anyone has any insight it would be much appreciated.

    Unauthorized.png



  • 2.  RE: SEP and An unauthorized change to windows

    Posted Jul 20, 2015 03:12 PM

    Haven't seen this before, what SEP version and what version of Windows?



  • 3.  RE: SEP and An unauthorized change to windows

    Posted Jul 20, 2015 03:19 PM

    The server is 2008 sp 1 enterprise running client 12.1.4.



  • 4.  RE: SEP and An unauthorized change to windows

    Posted Jul 20, 2015 03:35 PM

    And this happens after SEP is installed? How was it that it came to be SEP?



  • 5.  RE: SEP and An unauthorized change to windows

    Posted Jul 20, 2015 03:37 PM

    I'm not sure it is but they are looking at some articles about AV deleting items from the Trusted Store.  Was just wondering if anyone had heard of SEP causing any conflicts with the trusted store.



  • 6.  RE: SEP and An unauthorized change to windows

    Posted Jul 20, 2015 04:42 PM

    Personally I've not seen or heard this in regards to SEP. Would be curious to see the articles though.



  • 7.  RE: SEP and An unauthorized change to windows

    Posted Aug 12, 2015 03:02 AM

    I also got that message today.

     

    os version-


    Windows OS version: 6.0.6001.2.00030110.1.0.007
    Product Name: Windows Server (R) 2008 Standard,SERVICE PACK 1

    File Scan Data-->

    File Mismatch: C:\Windows\system32\linkinfo.dll[Hr = 0x80070002](got from microsoft genuine advantage digonistic tool)

     

    sep version-12.1.4013.4013 client

     



  • 8.  RE: SEP and An unauthorized change to windows

    Posted Aug 12, 2015 03:07 AM

    Problem is resolved by shuting the  computer by pressing  the on on/off button then by staring the computer again.



  • 9.  RE: SEP and An unauthorized change to windows

    Posted Aug 12, 2015 03:08 AM

    will update if get the same error message again