Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

SEP detecting one of it's own processes as a threat - SecLU.exe

Updated: 21 May 2010 | 6 comments
VDOR's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

SEP seems to think the SecLU.exe and is preventing it from running.

I am just setting up our new configuration and thought this was hilarious. I knew I should have been more careful about purchasing a Symantec product!

Anybody know what to do?

Comments

sandip_sali's picture
18
Nov
2009
0 Votes 0
Login to vote

SecLU.exe

Is the file sesclu.exe or secLU.exe?.  Sesclu.exe is a process that runs when there is an internal update taken from SEPM

Thanks & Regards Sandip C Sali

Grant_Hall's picture
18
Nov
2009
0 Votes 0
Login to vote

The other obvious explanation

The other obvious explanation (that Sandip was hinting at) is that you may have a virus that has named itself something similar to a process that SEP uses. If i were you I would do a full system scan in safe mode with system restore off.

Please don't forget to mark your thread solved with whatever answer helped you : )

teiva-boy's picture
18
Nov
2009
0 Votes 0
Login to vote

I just did an entire search

I just did an entire search of my laptop and found no instance of a file name Secl*.exe

I do however have sesc*.exe as mentioned by sandip_sali.

I think sir you have a virus that SEP just found for you.


There is an online portal, save yourself the long hold times. Create ticket online, then call in with ticket # in hand :-) http://mysupport.symantec.com "We backup data to restore, we don't backup data just to back it up."

VDOR's picture
19
Nov
2009
0 Votes 0
Login to vote

There is no virus on the

There is no virus on the machine. I literally just built this machine and the only programs on it are Windows XP and Symantec Endpoint Protection. Unless Windows embedded a virus in it's own OS there is no possible way for there to be a virus.

This was simply a guinea pig machine I built to deploy a new Endpoint install package to.

And the file name is exactly what I said it was, SecLU.exe which a simple google will tell you is this:

sesclu.exe is a SescLu\r belonging to Symantec Client Management Component\r from Symantec Corporation\r

Vikram Kumar-SAV to SEP's picture
19
Nov
2009
1 Vote +1
Login to vote

Is it the Antivirus that is

Is it the Antivirus that is detecting it or it is the Tamper Protection ?
If it is Tamper Protection then either disable Tamper protection or create exclusions for it.

VDOR's picture
19
Nov
2009
0 Votes 0
Login to vote

It's tamper protection, sorry

It's tamper protection, sorry for the lack of clarity.

I will see about disabling this feature.